Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa
File:                     fcd0ef24-b691-3997-9adc-56833e2b653f.roa (raw, json)
Hash identifier:          kxOryH9jXh/cDac14NYqNPsKPfrIGRZ6rIaJn/N0iEw=
Subject key identifier:   93:C5:FE:8F:4B:2E:B0:61:82:C2:45:54:08:D0:7B:44:6C:70:7A:21
Certificate issuer:       /CN=7311d09f-0e08-4761-abfa-23bbd03484c6
Certificate serial:       010D0C9F432858499C59E462DE97E9A8FB47B5D0
Authority key identifier: 3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     5081
IP address blocks:        2602:ff0c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e4:62:de:97:e9:a8:fb:47:b5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7311d09f-0e08-4761-abfa-23bbd03484c6
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=b3c65371-bec7-4fcf-8299-25febdaf5e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:73:c3:46:73:91:bd:86:59:01:ba:58:e7:
                    db:81:05:a7:84:97:62:9d:19:af:47:69:01:fd:b1:
                    f4:68:0b:56:46:85:53:17:90:e0:a6:55:d8:a6:93:
                    37:e1:b5:41:3e:c3:bb:66:09:79:e7:62:be:6f:81:
                    b1:c0:81:7a:0f:e1:af:3b:e5:90:48:f9:ef:5b:5e:
                    dd:ea:87:0f:21:73:a9:8b:3d:b7:ce:0d:06:56:0d:
                    f1:5d:30:79:82:4f:b9:9d:f4:e3:69:02:f5:05:66:
                    31:0f:14:c0:e8:d0:0c:c3:ec:77:b6:63:84:85:34:
                    0b:ca:16:17:d4:02:ed:8c:c7:00:c7:04:c0:06:2f:
                    d6:d2:38:6d:e8:cb:69:8e:ea:c8:e2:42:4e:ae:58:
                    e9:51:1e:ab:4f:81:6c:eb:70:42:93:68:22:d8:ef:
                    fa:00:cd:3f:b3:33:58:1b:83:d2:b5:85:f9:0f:6f:
                    8e:07:67:00:a7:95:5f:38:44:8f:e4:41:c4:95:72:
                    70:3f:64:5a:bc:a1:aa:da:b9:46:36:14:b8:58:ce:
                    95:c5:94:a2:66:a9:f9:b5:0d:b6:2b:1d:25:ee:2c:
                    97:28:47:7e:71:53:e6:7c:e9:4f:dc:62:0d:e0:88:
                    82:cd:52:a5:97:4b:53:5e:c6:d1:db:30:95:40:e0:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C5:FE:8F:4B:2E:B0:61:82:C2:45:54:08:D0:7B:44:6C:70:7A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:4a:9a:11:35:6c:61:46:55:9a:f7:13:91:65:11:79:f1:bd:
         55:fe:3e:0b:1a:4e:2d:c5:e8:7d:34:32:57:46:d6:f9:0f:82:
         06:7e:4c:ba:45:c3:e9:5e:53:b2:9d:43:84:46:88:d3:71:9a:
         3b:74:f6:e3:c1:e6:2b:c6:29:fc:0c:a4:ff:c1:14:2a:3f:9d:
         98:7b:b8:98:85:df:b5:f4:dc:e7:3c:de:1c:e3:fc:a7:58:56:
         c4:e9:4b:27:8e:14:64:c7:26:51:6d:31:8e:34:de:a5:36:46:
         18:c9:1a:68:cf:af:92:2a:a8:18:f0:3a:0b:2f:3e:b1:a0:60:
         23:aa:26:ed:2c:df:8b:08:91:bd:f9:42:a0:57:33:7d:53:f7:
         8c:8f:22:78:b7:04:95:fe:1e:4c:c1:d3:c5:48:20:a6:d2:c0:
         8c:6f:ba:d7:92:a0:4d:46:4d:55:23:b5:46:20:14:a6:9c:8e:
         d0:3a:cc:0d:af:62:fa:f2:74:50:7e:49:ae:f5:d1:9b:78:75:
         64:45:fb:ea:87:44:06:b6:95:6b:bf:ea:91:c2:8a:6b:f7:8f:
         67:12:37:d3:4b:7e:91:12:d4:38:20:0c:f4:6a:2e:5a:4f:7d:
         e2:b9:65:40:b4:23:60:a5:21:e1:6a:7f:bf:f4:2f:51:ad:ac:
         dd:b7:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:04 2025 by rpki-client