Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/c0eefeac-c159-31b5-9fc9-a9d26ad42b4e.roa
File:                     c0eefeac-c159-31b5-9fc9-a9d26ad42b4e.roa (raw, json)
Hash identifier:          /9oLj4TPpqdc55BdP1PL/u4exbaKEKV7RIOB3TmFd6c=
Subject key identifier:   FE:5B:87:A1:50:0B:49:A4:B7:DD:27:A8:43:B8:8F:1F:11:84:DE:7B
Certificate issuer:       /CN=37203f05-4142-4627-9338-1c8fecf7d1f1
Certificate serial:       010D0C9F432858491ED6DEF9D1A9022573C0DD40
Authority key identifier: FE:6E:47:59:88:1A:82:A7:4C:06:8B:CD:F1:AD:93:27:D6:7B:F2:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/c0eefeac-c159-31b5-9fc9-a9d26ad42b4e.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     400232
IP address blocks:        2602:fc71::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/37203f05-4142-4627-9338-1c8fecf7d1f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/37203f05-4142-4627-9338-1c8fecf7d1f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:de:f9:d1:a9:02:25:73:c0:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37203f05-4142-4627-9338-1c8fecf7d1f1
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=13b03de1-942a-4c5e-87ea-be8b995a26a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:02:e9:84:2f:e4:4f:54:6a:0c:60:ed:e7:
                    b6:87:67:ed:43:31:d5:e0:50:4b:bc:32:73:2a:bb:
                    98:f1:1b:ba:be:65:03:4c:7d:3c:a4:eb:cb:b3:4d:
                    86:ce:0c:2d:ae:0a:42:47:c3:df:16:6a:20:12:d8:
                    e0:ea:c8:97:8a:68:f2:71:c3:22:82:b5:b0:24:d7:
                    30:1f:07:70:cf:13:0c:c3:4c:a2:5b:63:79:5f:9e:
                    e9:4e:cc:75:7a:6b:a4:8f:17:f8:49:60:86:da:03:
                    73:d0:e3:77:77:90:89:fc:ca:98:ec:6a:78:1e:de:
                    28:54:fd:bc:98:1f:8b:09:ca:55:65:20:33:96:c2:
                    1e:35:16:47:36:26:59:19:84:3f:9b:c0:b9:d2:11:
                    21:66:dd:d1:7d:12:3a:e2:54:d2:cb:26:1c:ee:f6:
                    6a:78:77:90:f9:7e:f8:ac:6a:94:ae:77:d0:01:65:
                    ad:76:ae:df:34:6a:f1:f9:4f:06:83:06:e0:18:12:
                    7f:a8:15:f4:07:07:92:68:bb:ee:6b:7a:8a:fa:08:
                    02:fd:a6:1d:d9:9e:98:f3:f2:d9:96:67:a1:ad:cb:
                    2f:f8:f8:65:56:b8:bd:b3:88:ee:c8:f9:f6:71:3f:
                    b7:54:a7:ef:b2:96:45:57:8f:0b:68:65:a2:1f:33:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5B:87:A1:50:0B:49:A4:B7:DD:27:A8:43:B8:8F:1F:11:84:DE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/c0eefeac-c159-31b5-9fc9-a9d26ad42b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1/37203f05-4142-4627-9338-1c8fecf7d1f1.crl

            X509v3 Authority Key Identifier:
                keyid:FE:6E:47:59:88:1A:82:A7:4C:06:8B:CD:F1:AD:93:27:D6:7B:F2:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37203f05-4142-4627-9338-1c8fecf7d1f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc71::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:00:91:f4:db:7a:75:1b:1c:ec:ed:4b:b8:f2:67:00:83:91:
         a1:d3:ff:44:1b:6e:13:f6:e5:6c:75:a8:3b:03:83:54:db:c8:
         bd:8c:12:c4:9a:7b:26:d8:2a:82:eb:15:3e:c1:3c:75:5a:50:
         a5:7d:07:29:f7:a7:e8:eb:62:95:c9:74:03:ba:00:0d:08:83:
         f7:1a:e7:87:20:53:7c:f5:74:55:da:50:00:c1:79:63:2e:25:
         71:b1:72:09:70:79:3d:bc:4d:86:4b:c6:72:49:a8:5f:de:90:
         e8:a9:5a:7c:5e:78:c2:aa:37:1a:61:ea:c6:63:cc:98:06:25:
         50:9a:97:3e:2b:ba:44:9b:83:72:79:a7:d9:48:f6:5c:5f:ab:
         d2:88:12:4c:0e:b3:1e:4d:8a:70:a6:30:58:af:ee:0e:d3:08:
         69:73:45:5e:27:71:51:0f:de:95:58:91:d1:d7:a7:32:29:8f:
         3f:38:d5:47:e2:a6:c1:9c:45:3c:88:b6:2f:bb:52:7d:70:c4:
         ba:33:6a:a0:fa:84:0a:51:ad:d6:f4:18:cd:d2:9a:94:38:5b:
         29:01:12:df:17:30:8a:3a:b2:e2:2a:c3:93:dc:f5:8f:9f:be:
         f0:5a:b3:60:0c:a8:82:6b:30:2d:9b:56:91:65:82:a0:e2:7b:
         7b:17:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:00 2025 by rpki-client