Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa
File:                     9682d34a-d558-35ce-b94a-c06ff912b18e.roa (raw, json)
Hash identifier:          wMkwR5n/JROIW4xGsnfVgph+DbnSQfmD5Hh+yodSZP0=
Subject key identifier:   FA:20:E5:6F:0D:EC:A1:89:52:4A:B5:D9:BB:74:EC:BC:F4:B4:BC:B0
Certificate issuer:       /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
Certificate serial:       010D0C9F43285848B090AE2086C0F8A68A0C0800
Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     46149
IP address blocks:        2602:fc25::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:ae:20:86:c0:f8:a6:8a:0c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=f64fce35-f61d-4312-b447-d6a9634427f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:c9:c3:b8:93:10:da:f5:30:54:f0:5d:7a:
                    bf:f0:fa:d5:c3:7c:6a:f4:3a:9c:6c:93:70:20:4f:
                    b6:74:bb:45:c9:c4:20:d8:e7:68:d9:ea:2d:d5:30:
                    8e:d2:51:4b:1e:7e:26:93:06:b8:19:00:1e:d5:58:
                    36:14:80:31:a0:42:39:ae:9d:04:e8:c4:f1:bd:2e:
                    b6:ff:de:5b:ab:69:8c:84:9a:75:84:5b:1d:74:09:
                    12:55:d1:b2:0e:32:6d:4c:5a:6f:ff:27:f3:8a:8a:
                    b4:d5:27:05:db:60:9d:0d:4b:fb:99:09:ab:62:1f:
                    ed:7d:a5:fe:13:8b:3f:06:60:06:5a:90:39:96:a7:
                    3e:c4:43:b4:51:51:65:ef:ef:83:66:ca:3e:dc:e9:
                    56:98:a7:17:53:5b:18:a8:40:83:9d:1e:fd:28:05:
                    7e:d9:69:a0:41:6b:e9:84:92:ee:6f:d6:c8:c1:ac:
                    a7:66:cf:f7:ea:31:2f:86:61:08:67:9e:58:15:f2:
                    99:b3:2f:4f:e2:4d:c9:2e:a0:b4:2a:58:6e:d7:0e:
                    3c:bd:cb:b0:4f:10:5d:1a:58:6a:4a:d7:21:f3:17:
                    f9:1a:86:c5:5b:3b:56:63:c4:69:43:2c:ab:9d:b0:
                    6f:2b:cf:cd:79:8d:6e:74:d9:08:dc:14:94:63:7b:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:20:E5:6F:0D:EC:A1:89:52:4A:B5:D9:BB:74:EC:BC:F4:B4:BC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/9682d34a-d558-35ce-b94a-c06ff912b18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc25::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:cc:25:08:6e:d5:b2:8c:fd:a1:77:5f:7c:65:ac:16:d6:75:
         1b:8a:13:71:17:16:ef:62:4f:a3:b4:88:30:0f:23:2f:dd:53:
         41:22:5d:e1:b0:dd:02:e2:78:55:98:43:99:73:0a:6b:09:74:
         bd:f8:7a:14:42:9b:75:3e:eb:50:6a:5f:13:e5:6f:da:8c:c8:
         23:6e:de:8f:96:af:09:ba:a4:81:86:50:2f:05:8e:10:14:26:
         4b:e2:7f:cd:0a:6f:b4:b1:70:8d:6d:85:82:7f:eb:35:c3:59:
         6c:c5:88:ea:73:75:ec:82:27:05:4a:cc:17:d0:91:c7:68:3f:
         06:16:ac:05:9d:96:41:a2:b0:3a:56:70:06:db:0d:f3:28:c4:
         ac:82:43:90:12:50:91:04:05:f5:23:5e:77:07:a6:83:87:b0:
         ab:57:0d:6f:aa:5b:e2:dc:6e:24:00:7e:8e:97:b1:64:45:83:
         d3:10:99:72:93:ca:32:f2:09:c9:64:80:97:30:0a:b2:6c:8e:
         01:e9:56:a9:32:e6:3c:ab:2d:14:51:79:9b:65:67:59:28:f0:
         56:7c:82:12:1a:31:a7:4f:b6:dd:b2:5b:71:ad:32:30:1a:08:
         e0:bb:98:0f:1b:e7:01:29:bd:18:82:9c:50:42:4b:bd:fd:b8:
         28:5b:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:30 2025 by rpki-client