Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/2bf3924e-138b-36a0-856d-5f2e83dffe04.roa
File:                     2bf3924e-138b-36a0-856d-5f2e83dffe04.roa (raw, json)
Hash identifier:          9bs5oshaZgHcz6XxIyLedA+UKDkSU2sVKOKxxqq5wKQ=
Subject key identifier:   0C:D8:71:5E:80:EB:C3:D6:35:D3:B4:60:57:A4:5F:F0:F6:F3:F9:77
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F4328584A093A98AFD8D1DD2161AE7340
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/2bf3924e-138b-36a0-856d-5f2e83dffe04.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     55223
IP address blocks:        2602:fb0d:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:98:af:d8:d1:dd:21:61:ae:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=acffb169-6e0b-46f8-8d52-6fa9f6bf80ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:80:d4:c3:da:8b:fd:4e:ce:97:27:ef:9c:
                    c0:5f:4d:7d:14:cd:09:dc:7a:e8:25:78:58:12:2d:
                    34:dd:8b:7a:a4:3a:67:84:a5:d0:05:7f:23:54:d3:
                    20:24:e1:cc:89:f5:bd:c8:c8:20:b5:dd:fc:a8:ab:
                    54:16:87:a4:cc:5c:4b:35:25:05:80:f6:37:96:d7:
                    7d:0a:0a:84:f6:55:7b:d0:c5:d2:4b:24:50:eb:e8:
                    39:39:0e:c7:9e:3d:0f:23:12:94:07:16:70:30:55:
                    d3:8c:c4:86:9e:6c:58:52:c8:cf:55:2a:4f:ed:cd:
                    e2:4a:2d:2b:d6:58:82:57:c1:a0:52:da:0f:d2:0f:
                    e8:89:54:a4:8f:1b:59:51:a9:79:0f:14:4b:1f:ea:
                    cd:b6:05:12:e3:a8:db:29:e3:43:4d:bd:ed:12:94:
                    ca:cb:12:d7:28:5f:4f:26:f9:e9:d9:55:df:c2:11:
                    dc:70:6a:4c:d2:fc:9a:64:6c:83:b9:e7:98:99:11:
                    56:b2:22:9b:17:60:5b:4a:e7:58:20:67:a2:76:ae:
                    ce:20:aa:11:c8:65:03:9e:f8:1f:59:46:67:59:f9:
                    ce:23:15:80:00:e4:da:bd:9e:56:65:08:79:b5:fa:
                    9f:7b:8b:cb:e2:0a:19:6f:f7:7b:60:2c:89:21:c7:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D8:71:5E:80:EB:C3:D6:35:D3:B4:60:57:A4:5F:F0:F6:F3:F9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/2bf3924e-138b-36a0-856d-5f2e83dffe04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0d:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:c8:a3:27:61:fe:c6:1d:de:d7:01:7a:10:f6:cb:ed:9a:
         b4:28:37:0a:bd:1d:da:3e:8b:ca:ac:56:61:21:dc:0a:bc:9b:
         d3:61:0f:c5:03:22:1a:96:12:b9:f5:7e:29:e0:f3:6d:c7:e4:
         46:6c:e5:45:0b:84:11:4a:b7:5d:03:a9:90:fc:46:6d:df:c4:
         ff:9e:c7:ab:26:cb:a1:82:d0:f2:49:ef:fc:cd:bc:45:98:1d:
         38:25:8c:57:ef:d1:c6:8a:06:03:d3:c6:01:f1:fd:1c:47:46:
         4f:0f:52:06:62:00:14:ab:08:c7:1a:9a:a4:ec:cd:d1:6e:c3:
         19:f4:ef:e7:c8:44:b0:8d:2c:8e:17:f3:4f:b1:e4:52:9e:d1:
         46:c3:83:2b:16:45:fb:f8:08:2e:71:1b:4f:86:9a:4b:29:d4:
         60:cd:36:13:f6:73:ef:d1:3c:28:4e:f7:0f:b0:e0:e0:20:ba:
         c6:e7:5b:28:9c:94:9a:13:a2:63:80:18:d0:48:19:58:67:6c:
         15:84:20:07:37:88:e1:ac:8e:c4:aa:c4:cf:ce:54:ad:71:3f:
         61:3b:f7:c7:75:63:85:24:83:64:52:66:0f:21:dc:5b:f9:eb:
         8c:27:67:55:a7:53:85:a3:ac:cc:fb:a2:2e:df:e5:c5:6f:a3:
         23:1b:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:09 2025 by rpki-client