Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e88977fa-73e9-3ed4-9c71-5f8729528e36.roa
File:                     e88977fa-73e9-3ed4-9c71-5f8729528e36.roa (raw, json)
Hash identifier:          SMnu8FSo9HqpA0l806yFq5fqOL3LeOMlB2C0nvjiULI=
Subject key identifier:   40:FE:68:ED:4B:CF:88:FF:2A:9D:F2:DC:78:CE:2A:74:FC:6C:EB:DB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849244E673F052BB7D281925240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e88977fa-73e9-3ed4-9c71-5f8729528e36.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        2602:ff11:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:67:3f:05:2b:b7:d2:81:92:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=02f1262c-3d21-49c8-91a8-98419b42a1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:7a:61:a1:ae:9f:a7:50:4e:6f:c9:99:93:
                    9c:b8:56:cf:3a:82:98:39:9d:97:70:f3:cf:ba:4a:
                    61:98:af:6a:54:ce:d9:22:77:9b:15:0f:f7:a1:ce:
                    61:4c:d9:b2:87:2e:5a:82:ba:48:33:55:3f:d4:eb:
                    b8:10:15:52:3e:d9:51:a6:ab:ac:bc:87:4e:00:01:
                    f5:bc:33:7c:a2:71:92:6e:dc:94:18:77:7f:2b:a6:
                    c8:f3:6c:06:df:e5:c5:fa:fd:58:d3:f7:73:ce:95:
                    bc:1a:a8:58:30:96:fe:82:9b:86:8e:bf:40:ae:62:
                    43:9a:0e:81:9c:14:07:b4:61:54:1f:71:7c:4a:c6:
                    e0:ca:66:92:80:90:73:fb:8b:4d:82:90:44:30:d5:
                    db:9f:f9:b9:a7:d7:95:cd:10:1d:b4:35:57:55:5d:
                    ec:a5:2a:68:7a:ee:3c:d7:6f:b2:b1:4e:97:20:1d:
                    e0:1d:e1:7a:79:95:3c:57:49:3d:d2:8a:8e:22:e1:
                    12:46:00:83:19:5a:22:04:78:cc:fd:2e:32:ef:ce:
                    78:43:9e:ea:04:82:d7:51:e2:23:36:ec:6d:86:16:
                    b8:9e:5f:bd:c6:0d:0c:b4:6b:da:2c:91:93:93:31:
                    24:c3:fb:11:13:88:80:e3:2c:8e:01:e1:e0:cf:84:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:68:ED:4B:CF:88:FF:2A:9D:F2:DC:78:CE:2A:74:FC:6C:EB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e88977fa-73e9-3ed4-9c71-5f8729528e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff11:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:12:c9:8e:48:c1:dc:09:12:62:f1:c5:f2:e3:10:ef:72:7f:
         8e:2a:fe:61:15:99:3d:20:c7:cd:05:e7:5d:7b:b4:1d:9c:95:
         8f:83:41:66:24:a7:49:06:4d:fc:16:7c:a0:6a:15:4c:ab:bb:
         2a:d3:89:f6:14:44:51:3c:e0:46:b1:72:3b:f8:48:0d:f4:6f:
         1f:53:04:4c:b7:cd:44:76:86:4b:21:75:76:a1:6e:91:ec:df:
         dc:d7:03:95:51:52:7d:ab:17:61:20:63:f2:f9:ee:6c:e7:07:
         ea:31:19:e3:58:08:07:f1:d2:a9:ca:28:0d:7b:67:dc:f1:d4:
         cb:72:ce:12:82:5e:85:63:b2:73:25:88:8c:89:2a:d3:d1:55:
         98:03:df:df:cf:00:87:8b:b3:b3:9a:50:89:ce:87:dd:0d:4b:
         02:db:dd:33:c8:21:bb:34:73:b8:ee:23:bd:ad:ad:f2:e3:66:
         e3:bb:fd:eb:d4:f7:89:dd:bb:c8:70:96:95:61:bc:1f:40:6a:
         17:ea:68:5e:62:09:e2:34:58:0f:ea:f7:3c:30:74:83:1e:e4:
         e4:e1:fb:f1:97:e2:87:64:26:5a:c7:25:e3:8d:98:49:4e:3e:
         8e:73:5a:3e:fa:76:37:2e:59:ed:10:e8:ca:8a:58:c0:0a:cb:
         70:27:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:11:04 2025 by rpki-client