Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa
File:                     6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa (raw, json)
Hash identifier:          nGDfXzuhgCkGW9YUXm1KUuzp1AuFp+wlmz3U/M5Bg6w=
Subject key identifier:   C5:A4:8A:4B:D6:7D:60:63:61:C5:49:B5:46:CB:A1:92:17:34:C6:4A
Certificate issuer:       /CN=1045948a-6e89-46b9-82ff-13c039b622e6
Certificate serial:       010D0C9F43285849350E9A5247AE7E4FEFACB480
Authority key identifier: 6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     11263
IP address blocks:        2602:2ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9a:52:47:ae:7e:4f:ef:ac:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045948a-6e89-46b9-82ff-13c039b622e6
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=25a14981-7381-4273-b784-b0e76b59bf5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:a0:f0:ec:9c:25:b5:9b:a6:6e:55:de:ad:
                    bf:c3:71:07:f9:f5:a9:75:0f:35:9c:91:88:ae:1e:
                    ea:9b:57:10:a7:76:9c:b1:5e:e5:d1:2f:93:cd:e7:
                    f4:72:b2:b2:31:5c:04:96:ed:2b:2e:2c:2e:df:fc:
                    1d:38:56:84:d3:91:58:86:a2:08:b5:96:58:e2:c1:
                    b1:0e:97:86:65:bb:2f:bb:56:13:3d:6f:bf:42:cc:
                    8f:18:4a:9d:ec:ed:cd:23:43:96:e7:5c:99:c3:e3:
                    13:9e:30:26:21:92:7c:5f:31:c1:7f:ef:54:14:fe:
                    5e:43:5b:76:1d:9f:12:a2:c6:35:90:30:fc:83:25:
                    00:59:14:ff:45:82:45:d0:8c:08:68:dd:d5:0e:bb:
                    cf:06:8b:dc:25:f1:58:5f:03:c0:08:60:8a:4e:2f:
                    c6:1f:bf:96:93:2c:f0:7b:83:65:4a:28:6a:93:9f:
                    90:63:80:72:8a:96:4f:fb:c3:3f:de:32:f1:b2:be:
                    95:14:2f:e3:73:3c:0d:5b:85:0a:b2:a4:c9:85:8f:
                    8d:e0:a7:ee:dd:8d:17:52:4f:8d:c3:c4:20:a4:28:
                    38:3c:63:c2:d2:b9:84:88:dd:ac:6d:db:ff:14:56:
                    95:0b:23:ce:f9:92:10:81:a0:d6:e8:d5:43:fc:82:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A4:8A:4B:D6:7D:60:63:61:C5:49:B5:46:CB:A1:92:17:34:C6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/6cc8fce7-bb5e-38b0-ba30-6d2f526247dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6/1045948a-6e89-46b9-82ff-13c039b622e6.crl

            X509v3 Authority Key Identifier:
                keyid:6F:25:74:E8:4F:2D:27:12:40:B8:C1:69:E6:78:F4:A4:20:79:D0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1045948a-6e89-46b9-82ff-13c039b622e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:35:44:cc:fa:b8:90:70:34:13:f7:f7:f3:92:d3:fb:09:0b:
         04:61:d8:73:eb:04:02:79:a2:10:56:18:64:fe:c9:41:d3:4c:
         f5:55:8c:80:62:66:c4:e4:84:69:73:6f:21:b7:18:20:aa:21:
         7d:39:37:3f:d1:fb:4c:eb:2b:9b:97:e0:a6:02:2c:32:dd:95:
         b7:c3:28:03:2b:55:2b:49:f6:59:6a:a1:6f:b8:38:61:9c:e3:
         5b:83:d8:dd:52:ae:04:07:d5:44:d3:f3:e5:e0:69:95:ce:80:
         66:f5:93:29:a6:37:1f:d7:07:82:fd:09:f5:e2:a2:ca:f4:f8:
         a2:0a:be:07:2c:17:1d:a3:a8:23:bb:7c:9a:7e:06:7a:ae:e5:
         04:8d:fb:93:7a:93:83:5c:fc:30:9c:0d:bf:09:16:77:7a:31:
         87:23:3c:00:e0:eb:ac:97:80:09:25:41:25:04:0c:da:6e:ce:
         8d:24:b1:3c:1b:c2:0b:2b:f6:e8:78:0e:a5:1a:88:97:69:c3:
         c6:a8:0a:2c:ed:0a:b3:a3:ec:14:64:5a:57:56:4b:4a:d7:1f:
         ae:80:ae:e0:41:52:67:f4:6d:00:40:64:f5:d5:0c:63:e7:f6:
         a7:5e:83:21:d9:fb:fd:ae:c1:3d:ec:dd:8d:83:dd:54:0e:a1:
         f2:6c:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:19:47 2025 by rpki-client