Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
File:                     e88df447-48d4-3683-8210-be5c56e4acde.roa (raw, json)
Hash identifier:          UTyJLGWUKVYVsN3dPX5cz7p4gnIH+hDQSQ/oxmAOgbU=
Subject key identifier:   DF:AC:8E:62:0B:9A:13:69:CF:6E:F4:E5:8B:CE:C5:43:B2:73:BE:73
Certificate issuer:       /CN=856d400d-4340-4d39-9ec7-38c840be48be
Certificate serial:       010D0C9F4328584A10354E3C1F8EEC3C29A6E620
Authority key identifier: A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     213339
IP address blocks:        2602:f8d1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4e:3c:1f:8e:ec:3c:29:a6:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856d400d-4340-4d39-9ec7-38c840be48be
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=c247bdfb-e3b9-48c3-a3fc-ab3259dbb59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:76:52:7c:b3:29:5c:00:75:f7:42:79:f5:
                    69:a3:9d:7d:1e:00:5b:a0:de:2d:11:d0:11:c8:27:
                    a0:82:0b:2a:93:f2:52:7f:c3:33:58:26:fb:f2:7d:
                    95:de:cd:d7:28:70:1d:96:c0:8e:e8:bf:c1:5b:f5:
                    77:5e:57:01:b4:81:12:b2:63:e9:af:2a:51:c5:16:
                    1f:37:5b:7c:b0:58:98:03:6a:f6:a9:2e:ab:70:bb:
                    94:5d:31:ab:e0:62:d5:47:45:2e:ff:15:fd:3c:60:
                    30:68:33:54:ba:d1:21:91:d1:23:a5:49:54:cd:83:
                    aa:5d:ff:f4:4b:af:fd:6e:f2:e9:8f:ae:d3:d6:57:
                    7b:70:23:84:49:35:32:4f:b7:b5:c7:6c:08:76:2b:
                    31:dc:99:2a:45:72:b0:80:ad:62:49:70:c4:e4:2d:
                    ba:cc:cd:f6:e0:c8:21:e0:41:4f:c6:99:af:93:ce:
                    bf:69:c7:65:aa:6e:ec:64:7f:d0:d8:28:f9:93:cb:
                    09:f6:e7:6c:a1:78:ce:c7:52:ae:bf:d8:99:00:6a:
                    74:00:ea:3d:b0:c6:e3:dc:c5:10:87:3d:79:1d:33:
                    12:d3:08:f9:f5:9b:47:a1:8a:5c:40:a2:0d:8f:70:
                    2a:1b:ef:37:d4:50:97:1d:26:f1:c8:ba:31:79:c3:
                    10:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:8E:62:0B:9A:13:69:CF:6E:F4:E5:8B:CE:C5:43:B2:73:BE:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/e88df447-48d4-3683-8210-be5c56e4acde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be/856d400d-4340-4d39-9ec7-38c840be48be.crl

            X509v3 Authority Key Identifier:
                keyid:A4:0C:EF:16:BE:61:DC:EA:6B:D7:58:BC:2A:7C:C3:20:04:2E:FF:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/856d400d-4340-4d39-9ec7-38c840be48be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:ee:17:fd:68:80:ec:8e:0e:8a:cb:46:c3:3b:35:70:d6:
         2f:8b:6a:92:7f:34:10:73:c3:e1:b5:38:e2:bf:d8:dc:9e:03:
         25:da:67:50:ab:4a:70:f8:a2:03:89:dd:72:b3:81:67:b5:64:
         03:c3:60:ea:bd:33:9d:bc:2d:90:6b:da:5b:d3:82:28:77:60:
         72:61:34:9b:bd:c8:16:6d:eb:d9:9c:70:83:f5:4b:ab:09:7d:
         ec:1a:24:a8:a0:39:ac:4e:aa:6d:71:10:1a:2b:36:a8:28:8e:
         07:ad:2d:90:40:23:ac:31:b5:b8:a3:fb:74:8a:5c:03:bf:0f:
         1b:2a:23:01:ae:88:48:7a:8b:10:49:6b:6b:bc:cd:15:95:74:
         0f:7e:ed:7e:07:dd:3d:1a:33:33:5f:61:95:c4:35:43:cc:6f:
         e1:fc:cb:f4:12:aa:c4:28:41:4b:e0:65:ef:ad:5c:66:dd:48:
         09:6d:18:3d:ca:07:c2:ff:9a:73:4c:6b:f9:a2:23:27:7c:90:
         f8:1f:6a:1d:d8:3f:a3:09:f5:bb:e7:a7:cd:56:7b:da:72:ef:
         3d:df:5e:f5:b9:50:ff:25:b9:f3:ad:07:e6:0b:4a:20:35:33:
         e2:93:42:2b:4f:80:47:49:07:3c:a4:6d:d8:ae:2f:73:a1:42:
         53:6c:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:42 2025 by rpki-client