Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6d19d5f4-8a70-387f-bbc3-82c1b0e81c86.roa
File:                     6d19d5f4-8a70-387f-bbc3-82c1b0e81c86.roa (raw, json)
Hash identifier:          c4hKrnmRNZEuVgamICcTOKjcwuEP+O5XXrq3MCb8TeE=
Subject key identifier:   CB:88:37:49:04:1F:5C:72:F3:E3:8E:21:BE:E4:1F:D0:76:04:6C:6F
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657943B4AA49C65B88BC00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6d19d5f4-8a70-387f-bbc3-82c1b0e81c86.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:204a::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:79:43:b4:aa:49:c6:5b:88:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=ccde718f-719d-4030-8ac0-af29c7220c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:17:ff:9f:14:8c:09:f0:2a:f3:d8:f6:e2:
                    ce:46:83:a6:8a:3e:ed:a9:36:6d:af:25:6a:e2:4f:
                    54:78:a1:11:0c:91:93:8d:51:3b:5d:62:43:8f:bd:
                    28:39:67:1c:03:91:3f:96:60:07:57:e2:46:67:71:
                    bf:a2:49:71:70:cd:1d:bf:cb:59:3e:1b:de:93:db:
                    5b:e8:bb:32:07:29:ac:19:a2:8c:c5:e4:bc:2e:eb:
                    c5:96:e5:df:cd:39:05:d4:8c:c3:a3:f8:04:02:83:
                    8f:75:af:a3:69:9f:39:40:dd:71:8a:1a:4a:5d:1e:
                    f2:16:44:5f:8d:ff:db:50:56:4e:b9:2b:27:09:5e:
                    d8:e4:65:a8:67:58:9a:76:cd:ac:97:86:9f:d3:b9:
                    34:71:55:65:6b:e0:c2:d6:13:fc:7a:a9:84:4f:65:
                    82:24:0f:e6:9e:f1:e1:e7:c6:2a:00:3d:40:f7:a5:
                    77:89:b7:7d:59:19:0e:70:d7:18:f2:e5:1e:62:65:
                    80:21:cf:1b:e9:9f:8e:72:5d:9e:5e:fd:63:34:3f:
                    fb:b2:0a:b2:52:aa:8d:ab:d2:d5:ed:b7:c9:7e:73:
                    72:b3:86:8d:82:ad:f2:52:1a:dd:14:ce:10:22:6f:
                    17:48:1d:01:e7:19:64:1d:5f:a1:12:d0:f6:3c:ef:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:37:49:04:1F:5C:72:F3:E3:8E:21:BE:E4:1F:D0:76:04:6C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/6d19d5f4-8a70-387f-bbc3-82c1b0e81c86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:204a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:e7:93:7e:5b:7b:2d:f2:e9:82:3c:2c:b6:d1:26:68:61:88:
         1b:92:e3:f0:59:97:34:2c:4e:da:b5:86:51:ea:35:f5:13:46:
         35:bc:f3:dd:e0:9c:08:7d:f7:b2:1f:27:2f:f9:24:c7:d3:09:
         12:4a:8f:01:19:32:3a:5d:d5:50:5e:0a:8b:1b:65:f7:9c:d5:
         b4:5a:d5:61:3f:23:b7:02:ea:b7:d7:50:e1:93:91:ca:b0:f8:
         7a:f8:e1:c7:25:dd:4c:36:0f:f0:60:73:b5:77:c9:cd:16:a2:
         9b:89:d9:3a:63:95:5d:b2:8b:e5:ea:2f:d1:b0:d3:e4:fc:82:
         87:8b:f1:6a:b0:6f:30:50:cc:a4:66:9c:0b:95:27:7d:77:af:
         ba:8a:0e:5f:96:de:23:b9:fa:74:19:0f:0c:08:b7:a0:a4:00:
         5d:93:22:76:fd:f0:74:12:5c:f1:58:6f:6e:73:93:a0:cb:ea:
         d6:b4:c1:fa:ea:8c:7f:09:cf:4c:00:e5:85:8b:6e:72:d2:33:
         d2:fc:3c:5b:84:3a:d2:de:e0:80:3b:c1:b8:88:89:37:4b:c5:
         07:17:f9:57:3b:b6:d6:f7:07:9a:5c:d5:ff:5f:cf:de:a8:18:
         04:d9:fb:cf:00:2d:e2:e1:d9:39:44:8d:84:cb:eb:e2:96:c9:
         fb:a3:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:05:29 2025 by rpki-client