Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/fb919bb5-a69e-3120-bbf2-ea2a59d4557c.roa
File:                     fb919bb5-a69e-3120-bbf2-ea2a59d4557c.roa (raw, json)
Hash identifier:          lrBOZKR4z6Gg11/qSIcen+8JLKFV0p8HGYkFOmO5C/Q=
Subject key identifier:   47:87:AC:6F:E8:2E:41:70:55:33:CD:33:45:18:D5:63:60:EA:48:AD
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A11EF67020BB1E54F4B96E140
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/fb919bb5-a69e-3120-bbf2-ea2a59d4557c.roa
Signing time:             Tue 03 Jun 2025 15:51:52 +0000
ROA not before:           Tue 03 Jun 2025 15:51:52 +0000
ROA not after:            Mon 01 Sep 2025 15:51:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:ef:67:02:0b:b1:e5:4f:4b:96:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun  3 15:51:52 2025 GMT
            Not After : Sep  1 15:51:52 2025 GMT
        Subject: CN=f34d6391-7a38-4ca1-85d0-71c9d7994d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:95:e4:dc:98:5f:71:8c:bc:f7:da:47:49:
                    24:e5:ac:48:60:a0:29:65:2b:58:65:6e:8e:cb:63:
                    70:46:41:02:02:b5:8d:6a:10:44:2d:6e:fd:1d:e2:
                    bf:95:36:c2:85:0d:79:7d:d2:d9:34:d2:46:8e:59:
                    ae:85:a4:c4:3c:87:5a:8f:76:a8:d8:fb:05:0b:30:
                    04:19:3a:4f:66:fc:15:2b:04:5a:01:49:b1:6c:6c:
                    37:5f:98:dd:f1:83:34:93:64:07:c4:73:d6:73:f7:
                    44:58:91:48:1f:21:01:50:63:73:5e:6f:bb:1c:15:
                    af:46:02:7a:96:51:75:ef:47:53:f1:31:28:31:36:
                    16:c7:00:7e:a8:f8:a3:86:f9:0f:17:09:94:03:5b:
                    2b:50:46:65:e5:99:1e:56:03:52:c6:7b:e2:74:ff:
                    31:ab:ab:8e:94:26:35:ab:f9:ad:5f:f0:d1:ea:75:
                    ca:b7:2b:57:a3:27:78:ba:71:35:e7:0d:6b:eb:dc:
                    20:43:38:c1:13:1f:8f:7f:00:8c:df:5c:e2:13:8a:
                    1c:41:e4:84:55:8a:37:73:e6:a8:75:70:70:f1:eb:
                    ac:98:ea:2b:cd:26:83:ca:fb:0d:74:d0:b1:d2:a1:
                    93:67:fd:19:df:2a:de:cc:3a:36:00:e3:7c:8a:f3:
                    60:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:AC:6F:E8:2E:41:70:55:33:CD:33:45:18:D5:63:60:EA:48:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/fb919bb5-a69e-3120-bbf2-ea2a59d4557c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:d00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:15:a2:08:65:33:c9:78:d5:60:e4:69:09:f4:05:52:a1:a2:
         21:8c:39:92:98:7d:4f:99:ae:a4:8c:a8:73:23:9c:7c:d6:eb:
         4d:54:fb:af:ca:33:8c:be:33:b6:a1:34:43:07:a0:ea:c4:ed:
         1c:20:d1:2d:43:3c:95:d1:82:ac:7e:c4:3f:bd:9c:00:ad:3a:
         d1:05:56:e0:07:40:c7:bd:da:bd:f4:d2:db:4d:c8:32:fa:76:
         c7:e3:a9:8f:f0:be:7a:82:b9:5a:eb:2d:7e:f6:c7:be:c9:ae:
         54:33:0d:fc:e4:68:20:4a:dd:05:0a:30:b0:a1:35:67:89:7e:
         15:60:64:1a:6b:64:91:b8:39:6e:55:cc:f0:6f:e5:82:41:9a:
         51:77:12:da:2c:b2:95:10:d4:83:38:d3:36:d6:eb:36:34:ff:
         2d:eb:be:13:76:c9:c5:b1:f6:14:a4:ad:8d:36:70:bd:dc:21:
         92:09:c5:b1:45:8e:06:3b:75:03:ed:2b:4f:69:6c:08:9e:2e:
         e6:72:b0:cc:82:00:f2:bc:25:48:0a:48:10:c9:7b:5a:e4:e5:
         d5:5d:d4:8f:aa:b2:e1:4a:f4:e3:bb:0f:e8:b1:3d:bb:c1:41:
         4d:d0:81:f9:7c:f8:c8:f6:9b:cf:1c:bf:51:44:75:3f:92:28:
         c7:82:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:28 2025 by rpki-client