Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/e54ca2a8-d49a-34b2-8b2e-e66201e18755.roa
File:                     e54ca2a8-d49a-34b2-8b2e-e66201e18755.roa (raw, json)
Hash identifier:          d7oyYLBpj3xDIr0N2dG4jGPnmj8bR1AO4Ydii5CoKN0=
Subject key identifier:   C9:AC:84:F0:F3:6A:F7:AF:71:A7:1D:EC:4A:7D:CB:9A:47:F6:17:88
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584A5E86A72461594EEDEA0C1240
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/e54ca2a8-d49a-34b2-8b2e-e66201e18755.roa
Signing time:             Tue 01 Jul 2025 02:18:03 +0000
ROA not before:           Tue 01 Jul 2025 02:18:03 +0000
ROA not after:            Mon 29 Sep 2025 02:18:03 +0000
asID:                     12198
IP address blocks:        2602:f919:10a::/48 maxlen: 48
                          2602:f919:10b::/48 maxlen: 48
                          2602:f919:10c::/48 maxlen: 48
                          2602:f919:10d::/48 maxlen: 48
                          2602:f919:10e::/48 maxlen: 48
                          2602:f919:10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:86:a7:24:61:59:4e:ed:ea:0c:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Jul  1 02:18:03 2025 GMT
            Not After : Sep 29 02:18:03 2025 GMT
        Subject: CN=dfe1bbc0-64ca-4661-9d48-664641b333d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:a3:65:63:6a:4f:9e:38:e7:1e:98:30:51:
                    fb:cd:bf:6f:d0:f8:e2:33:56:c6:c5:3a:87:55:bd:
                    de:ad:21:3a:b2:25:d4:03:5e:26:b0:51:41:b7:e3:
                    f3:11:d2:3f:07:bb:fa:dd:1c:ba:89:c5:4c:ec:59:
                    f6:a9:59:08:8c:86:32:f8:ff:23:93:b3:d9:02:a2:
                    31:79:40:02:c4:8e:56:64:ce:e7:55:f4:7a:85:f3:
                    3b:d2:f6:df:ca:88:01:5b:1f:51:b5:21:36:b4:ba:
                    82:33:b1:3a:89:2c:40:f1:c9:42:ae:20:82:3a:5c:
                    d6:df:ab:dc:1e:62:4e:e6:e3:3e:0d:14:b9:e8:7b:
                    8a:ed:f4:1c:d6:e0:1d:61:72:93:65:ed:f6:d1:1e:
                    30:99:d0:01:29:5f:a2:39:19:6a:6b:a0:93:77:2e:
                    24:71:2d:bd:9d:ad:1b:fc:57:4e:e9:7e:8b:9a:24:
                    51:bb:e9:a7:89:8c:25:eb:3d:ba:05:a4:97:ab:e9:
                    ad:eb:6b:35:57:6b:06:7b:d5:83:56:87:4d:34:8f:
                    98:25:d9:0e:00:cf:5a:6f:e1:a0:51:89:2b:65:c8:
                    5d:43:1e:a2:d4:d0:aa:3c:42:7a:70:57:2f:13:e8:
                    c8:5c:2b:fb:06:ea:78:55:97:04:fb:6c:17:2e:9b:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:84:F0:F3:6A:F7:AF:71:A7:1D:EC:4A:7D:CB:9A:47:F6:17:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/e54ca2a8-d49a-34b2-8b2e-e66201e18755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:10a::-2602:f919:10f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a8:0f:a5:65:37:81:f7:94:9e:b3:50:e2:31:cb:db:39:4c:
         db:95:a3:ec:fa:c4:23:7b:6e:3d:f9:18:8b:d9:f8:9f:8a:57:
         59:aa:8e:af:ec:5c:01:ea:38:59:51:c3:7a:58:e7:8f:f6:6a:
         9a:1f:a8:c4:14:d2:6e:9d:ca:ca:6f:77:95:04:fc:2b:ab:13:
         00:ae:d6:fd:9c:e2:4a:53:e7:53:11:18:d5:e6:04:8c:79:3f:
         ba:74:f5:cf:02:85:bb:fc:b0:11:88:dc:fa:f9:dc:10:dd:15:
         f8:61:4b:9d:79:dd:5b:1c:9e:f1:4b:1f:55:82:03:95:a7:9c:
         be:78:1a:05:70:de:81:7b:a8:d0:55:bc:0c:d2:6a:3b:07:9c:
         45:71:15:7c:6f:37:6c:38:c8:20:01:28:b9:fc:ff:57:cb:b7:
         4a:52:d3:7e:fc:12:f8:ac:02:f0:28:35:a1:0b:d2:5e:c9:aa:
         93:25:80:f2:7f:fc:2e:e0:84:03:0f:e1:37:5b:d1:94:06:08:
         9e:a2:43:ad:44:82:1f:93:0e:02:27:50:bc:77:34:0d:3a:61:
         bf:20:2a:16:fe:28:38:75:53:17:70:2f:28:c0:81:52:69:05:
         69:c1:0b:fa:d5:39:8a:d9:f8:b6:1b:22:1d:2c:0e:ef:40:ff:
         ac:00:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:55:04 2025 by rpki-client