Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
File:                     1e64ffdf-9888-3fb9-9826-b212648077cd.roa (raw, json)
Hash identifier:          9EOC5M3LnHOrFLr0MNsU/DRs/myJQNAR7vcan9D/DX4=
Subject key identifier:   B4:C2:D3:9E:13:BE:B1:27:B2:55:32:BF:A0:79:2B:9B:9C:DA:F8:1D
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584A66C076B525606270852DAD00
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     21991
IP address blocks:        2602:fbcf::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:76:b5:25:60:62:70:85:2d:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=4644a5e0-730f-4cba-918a-e697852ab9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0a:23:eb:89:86:7f:2b:f4:e3:0c:5c:ca:91:
                    98:43:1f:e2:20:4a:66:a7:df:2f:10:4e:21:ff:c5:
                    8d:ca:45:98:53:d4:e6:2d:15:a7:92:fb:81:8d:2f:
                    04:78:6c:f0:ec:4c:7d:f3:4e:84:b9:29:6f:23:52:
                    5c:95:14:c0:d0:03:6e:fc:81:e8:6a:5f:47:a1:a6:
                    0b:50:34:58:1b:11:2b:5e:93:54:b8:58:09:1b:2f:
                    e3:c1:d0:02:21:d3:b5:d4:1a:1c:a5:7b:bb:70:1b:
                    9a:8f:09:75:e0:27:38:b1:85:7e:e3:ee:db:82:e8:
                    01:60:3e:44:d8:75:10:3f:f3:35:2f:f2:d0:a7:f6:
                    32:69:d1:01:cc:ab:0c:8a:d9:a2:41:71:03:76:5d:
                    6b:70:cd:eb:2a:e4:dd:81:4d:ea:56:2b:b5:d1:33:
                    0e:47:e6:c8:2f:f8:70:6d:51:46:99:21:b2:52:0d:
                    30:74:26:1a:2c:21:84:f6:a0:a3:c9:25:63:ad:6a:
                    a9:ea:e1:41:38:ff:bc:46:56:90:e3:bf:e3:3b:67:
                    c4:52:64:52:d6:3f:3a:9c:90:46:d0:32:13:ff:83:
                    fe:a9:c6:81:88:a0:31:4c:95:77:b2:f4:23:65:1f:
                    0e:16:d6:a0:76:e5:75:0d:03:71:1c:6f:04:a3:50:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:D3:9E:13:BE:B1:27:B2:55:32:BF:A0:79:2B:9B:9C:DA:F8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/1e64ffdf-9888-3fb9-9826-b212648077cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:d3:ac:48:f9:b9:87:8d:7c:ad:5e:d6:47:e0:3f:48:7c:
         bf:12:24:ad:71:e8:a2:3e:60:f5:6d:e6:e3:27:fc:51:ac:d5:
         1a:33:40:b2:50:66:3d:17:e5:c9:be:d1:0c:74:16:1e:6d:cc:
         a9:da:b0:86:0e:ba:69:6a:b1:c2:84:17:17:4b:b0:8b:9f:20:
         f1:cb:e5:d4:ce:9c:d9:14:71:2f:b2:1d:da:7c:58:a5:e2:f3:
         e1:07:60:0a:65:61:1f:28:49:62:5b:20:fe:65:0e:0c:6a:eb:
         76:8b:75:4a:72:54:11:c6:be:ea:f7:21:8b:aa:ed:ba:d5:02:
         6e:47:8a:5e:c2:4f:3c:e5:9d:c7:8a:a2:cd:26:18:db:85:7f:
         fc:a4:7e:ba:eb:56:21:fb:4a:b7:4a:86:57:ae:57:d0:5d:5a:
         04:87:11:35:f4:13:3b:ad:14:e9:ac:f6:c4:1b:03:c2:89:c1:
         75:1d:43:1d:2c:9a:e0:f9:d9:ac:19:0b:91:20:59:20:69:3b:
         ae:54:59:5c:9c:91:c3:05:3f:16:7a:fd:7a:8b:2f:cb:2a:9d:
         29:77:79:4c:90:ac:f0:a4:f2:f6:19:00:e2:64:bf:15:ec:f0:
         41:21:ed:69:af:b5:95:36:cd:19:0e:1d:d9:d4:8e:45:14:30:
         dc:44:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:28:11 2025 by rpki-client