Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa
File:                     87654cdb-6a1c-358d-8cae-7f3770237693.roa (raw, json)
Hash identifier:          Yhzz5VmctbAlGExiKTjZ5qNzkd4vWh8jv2sXys9uGJA=
Subject key identifier:   8C:BF:7C:6E:2A:BC:E8:E0:A7:B0:44:18:C2:35:4A:D9:66:0A:B4:26
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584A0E701C47C65CAC3924378FC0
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa
Signing time:             Mon 02 Jun 2025 09:47:58 +0000
ROA not before:           Mon 02 Jun 2025 09:47:58 +0000
ROA not after:            Sun 31 Aug 2025 09:47:58 +0000
asID:                     20473
IP address blocks:        2602:f66c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:70:1c:47:c6:5c:ac:39:24:37:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Jun  2 09:47:58 2025 GMT
            Not After : Aug 31 09:47:58 2025 GMT
        Subject: CN=91bfc383-eb0c-44c6-a742-8b3839cce3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:3f:52:e8:fa:96:f0:0d:32:b9:80:07:8c:
                    8c:04:ce:b0:93:f8:15:49:db:4f:23:5e:d7:d9:3a:
                    03:57:2a:52:eb:f7:10:89:ba:0b:7f:24:69:a8:6f:
                    1e:cf:5c:1f:4d:39:b2:40:cc:e9:39:52:d2:54:e4:
                    fd:61:ec:59:3c:f4:7c:c6:cf:8c:22:9e:1b:b8:9f:
                    13:e6:fd:5e:1f:15:f2:46:f5:d5:ff:bc:a9:69:90:
                    32:3f:d6:cc:6b:6c:16:ce:36:36:7c:86:4f:d4:a2:
                    dc:f3:66:a3:ee:4f:32:0d:20:53:4b:d3:9b:45:e3:
                    b8:cc:8d:7c:f5:1d:c2:c9:94:6e:97:2a:fe:1d:fa:
                    5c:0c:57:6e:b1:fe:fa:c0:aa:23:3d:d3:1a:6b:29:
                    5b:98:c4:85:a9:79:c0:8c:42:b6:41:ff:5f:39:58:
                    67:83:d7:92:cc:d0:d6:e1:45:4f:3d:9c:13:82:0c:
                    be:db:38:75:53:5f:ac:be:80:fd:05:98:40:4e:2e:
                    8e:91:70:35:00:99:6d:d7:e1:4f:55:aa:69:ea:4a:
                    4f:b9:1b:88:d0:a8:c3:6e:b2:09:b1:71:f6:c1:ba:
                    08:93:2b:b4:b0:d6:8e:3c:ab:85:be:4f:bb:0b:54:
                    3a:d9:a8:dd:6d:3b:b8:60:60:93:0c:b7:f8:cf:2d:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BF:7C:6E:2A:BC:E8:E0:A7:B0:44:18:C2:35:4A:D9:66:0A:B4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/87654cdb-6a1c-358d-8cae-7f3770237693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:4b:0c:3d:30:95:21:3b:f1:c8:c6:75:c2:12:87:2c:80:
         e0:d8:21:11:83:d8:7a:28:cd:da:d4:52:d5:3c:1b:66:41:44:
         c8:21:81:2d:fd:38:80:61:41:64:bc:d8:6e:95:85:4e:48:ab:
         32:c7:af:c4:b7:ce:88:e6:d6:6d:1c:1a:14:65:80:68:27:fb:
         5d:6b:43:70:ad:34:99:76:6c:ab:4f:4d:d9:8d:3d:65:ce:10:
         fa:fd:a7:b8:7e:d2:3e:97:bd:b0:5a:18:2d:26:06:c0:11:d5:
         5c:87:9f:2a:fe:55:96:eb:83:6f:d9:de:86:71:de:f1:c7:ce:
         57:b8:4b:d9:0f:11:4d:09:3f:59:75:45:d0:d3:9e:d0:25:48:
         38:f5:89:89:cf:bb:4e:bc:4f:2d:25:14:78:ee:80:8b:17:e7:
         58:da:f7:81:37:ba:3a:6f:dc:17:e6:f0:38:9d:f0:19:ba:e9:
         43:e8:3a:ff:f7:0c:89:38:20:32:ae:0e:d2:2b:4b:ad:7c:43:
         f4:f2:32:6e:24:5a:9b:40:54:f3:f4:a9:e2:48:a7:18:69:cb:
         8f:44:89:5f:b7:d5:1d:15:bb:8a:7d:98:7a:1f:31:0f:2a:d4:
         1e:64:2b:44:70:40:d3:29:43:43:d5:17:09:fc:9a:a6:4a:3e:
         e1:40:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:53 2025 by rpki-client