Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f7fda8bc-67a0-3a09-b8ba-59bc669aab5f.roa
File:                     f7fda8bc-67a0-3a09-b8ba-59bc669aab5f.roa (raw, json)
Hash identifier:          99dMRQrx+bOzdHeBviIvnSBpF47gUTxCU4/RuLPqWEs=
Subject key identifier:   C9:BF:0E:17:76:56:A0:EF:54:5C:FB:CB:2B:91:33:B4:4B:0F:97:01
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A11EF2366F1248320110B7F80
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f7fda8bc-67a0-3a09-b8ba-59bc669aab5f.roa
Signing time:             Tue 03 Jun 2025 15:51:20 +0000
ROA not before:           Tue 03 Jun 2025 15:51:20 +0000
ROA not after:            Mon 01 Sep 2025 15:51:20 +0000
asID:                     399970
IP address blocks:        2602:fc3b:b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:ef:23:66:f1:24:83:20:11:0b:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun  3 15:51:20 2025 GMT
            Not After : Sep  1 15:51:20 2025 GMT
        Subject: CN=50171ef9-10be-482d-849a-0a22ca3de199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:44:e9:3c:2c:37:a3:e3:41:2e:ad:c5:4b:
                    78:7e:40:20:a6:24:36:a8:4e:c4:0a:93:bc:c7:31:
                    7e:71:bd:d2:e3:63:01:96:e3:c8:da:dd:7a:1d:17:
                    9e:e8:ed:da:e2:18:b7:7e:04:01:16:c1:ed:e2:1e:
                    86:7a:78:b3:22:51:9c:16:c5:15:b4:36:13:27:dd:
                    c8:b8:9f:b7:1c:cd:ea:94:32:73:c4:56:00:2a:d2:
                    fd:2a:20:88:6f:ed:8e:5c:29:76:c1:b7:75:bc:76:
                    97:27:e6:3e:40:b5:f4:d8:1c:10:e7:79:57:c2:0f:
                    52:71:d5:df:8f:de:74:8a:7e:97:17:37:c4:82:73:
                    78:77:d5:b9:f0:a5:82:a2:94:18:9a:31:f9:6d:f6:
                    de:e1:f9:65:49:00:47:19:0b:17:ff:ce:2e:1d:cb:
                    42:f5:4f:46:80:a9:9e:78:f7:c9:7b:d5:a0:80:d3:
                    cf:a7:2c:e7:1b:36:38:6b:eb:6a:3a:64:ff:6f:3c:
                    81:14:ca:7a:69:46:c3:55:0b:fe:a0:78:1e:6d:c2:
                    29:13:e8:23:40:7e:c9:e2:35:62:d6:96:2d:97:41:
                    39:1f:83:c7:ab:4f:c4:52:e7:c3:fb:a7:7a:6a:75:
                    c7:3b:9e:b6:43:49:97:24:ab:d0:18:2e:05:f3:40:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:0E:17:76:56:A0:EF:54:5C:FB:CB:2B:91:33:B4:4B:0F:97:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/f7fda8bc-67a0-3a09-b8ba-59bc669aab5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:b00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:22:12:22:f6:06:fb:0c:4b:03:95:f4:d8:04:15:51:50:
         12:3a:e7:c3:1b:66:9d:70:6e:aa:37:08:90:fa:59:af:02:02:
         4f:68:69:96:81:58:17:72:c6:c8:52:23:97:7c:4b:89:a4:cc:
         94:95:1e:ed:43:df:f8:f5:78:23:21:2e:4b:52:f7:62:45:cc:
         ff:e7:80:0c:32:5c:f7:17:ca:54:2a:46:78:f0:ba:9e:22:58:
         26:6a:83:ee:7e:76:59:a1:81:dc:78:ac:a4:b9:c4:4d:8e:48:
         a8:39:83:40:d7:40:72:b7:89:d1:a3:26:7b:88:d9:0b:23:97:
         ed:2d:bb:d2:ed:53:cd:8a:5b:d7:5a:fa:5b:dd:7e:ca:1c:8d:
         55:ab:c9:cc:b9:2f:36:7b:06:f4:90:fd:e7:d0:68:cd:05:5c:
         f5:84:76:b7:d2:e6:4f:b6:bf:97:1b:6e:c6:b2:be:ae:03:f9:
         33:68:c5:10:22:53:72:94:b4:10:dc:3b:20:c4:c9:31:ab:a6:
         f2:41:3d:16:e3:b9:da:7f:e0:b9:c2:f3:81:40:b1:f3:96:2e:
         6c:10:50:37:6c:93:ae:35:39:59:a0:62:74:bb:c0:44:c7:af:
         c3:7b:41:cb:e8:b2:f2:54:d0:ae:33:ae:85:c5:e5:9d:04:91:
         5e:5a:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:35 2025 by rpki-client