Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
File:                     83c6daf3-1df5-34c8-bcfe-d09465201564.roa (raw, json)
Hash identifier:          25ePWQPKnKO+jIpWnEVoatnVMeQ9zqz9gA5Qy+C0IEo=
Subject key identifier:   9A:65:1A:B4:C7:69:1D:54:C8:00:39:9A:75:3F:60:64:37:44:F7:0F
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F43285849DB2A29D5A974DF6A0C221340
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        2602:f777::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:29:d5:a9:74:df:6a:0c:22:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=ba45cb49-6c98-4bfa-96e7-2ba971fdd1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:49:a0:83:aa:b4:b9:2c:b7:5e:3d:0d:19:
                    47:3b:09:2b:6c:43:55:20:26:4f:cf:3f:69:ed:cc:
                    82:31:a1:2a:ea:29:a7:ce:6a:4a:dc:19:46:e4:1b:
                    bf:c9:70:a6:3f:78:79:9a:84:36:40:b1:cb:7a:9f:
                    bc:c1:cb:94:8f:35:9a:ee:69:94:44:00:fc:1a:c0:
                    52:fc:41:0c:e1:b6:ce:9d:19:ca:3f:27:fd:eb:28:
                    5d:4c:ca:9b:1b:c5:90:13:0e:cb:21:3b:ff:82:60:
                    bb:fe:e1:c9:75:6b:93:f0:8c:94:59:f6:91:ba:a5:
                    5f:c5:ff:62:5d:52:12:5d:36:7f:e2:8b:65:29:3a:
                    33:99:5f:7c:1d:e8:af:c5:74:4a:30:d5:0b:09:0c:
                    4a:46:cd:f3:37:e3:c4:8c:9a:56:39:b1:6a:7b:b4:
                    e2:70:7e:7c:ad:9e:0a:8f:3f:56:5e:6c:9f:da:d8:
                    0e:e3:8b:b4:25:ea:b9:02:e5:90:18:4a:4a:b1:42:
                    f3:ce:14:ee:99:38:e2:b0:3d:fe:cb:34:1b:83:de:
                    fd:e7:f3:e8:4a:e3:0e:d6:ab:b6:ab:29:e3:03:f7:
                    49:24:f8:7d:c6:5b:37:5a:d8:d1:96:17:43:36:2e:
                    93:8b:55:0c:4d:74:d7:e6:11:d7:5d:cd:7e:24:34:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:1A:B4:C7:69:1D:54:C8:00:39:9A:75:3F:60:64:37:44:F7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:23:6d:98:0d:f2:36:57:6e:09:32:a2:8f:67:88:c6:0e:1b:
         e9:ff:24:47:f5:80:26:a6:3a:cf:14:f2:df:1f:4f:b7:9f:9c:
         e7:bd:01:df:ad:a8:fe:b8:9d:a1:7b:cc:25:c6:9f:b3:b8:f1:
         3f:99:be:df:56:ac:be:08:7f:a4:3e:9a:73:70:0b:a0:de:ae:
         70:63:d6:f4:7d:26:11:4f:e1:5e:6f:0c:40:5b:e0:9a:31:a8:
         48:df:87:cb:5f:0e:67:a7:83:e0:55:83:f2:ab:58:54:83:40:
         f4:32:aa:ac:be:ee:5d:e4:2f:d8:7a:c3:20:df:67:79:d5:d2:
         31:ef:aa:98:e9:b0:8a:74:c4:3d:39:5c:75:81:09:98:81:33:
         0d:bd:74:99:f0:00:bb:71:17:ac:11:ea:72:51:92:a3:c0:b7:
         1f:32:76:ca:c5:69:7a:ce:5d:e7:a2:69:b3:30:68:f1:34:80:
         c5:1d:dd:ff:90:63:46:c9:ca:35:85:49:df:93:e8:57:a9:8f:
         1e:3a:5d:aa:d6:b2:12:0f:e9:c3:1f:4e:4e:09:21:61:e9:ca:
         df:0c:72:e8:78:e4:81:a3:a7:52:9c:98:a8:31:28:44:ce:07:
         82:2b:67:7e:ef:e5:e0:bc:e3:02:a5:06:8a:4d:db:20:e3:4c:
         18:e6:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:14:36 2025 by rpki-client