Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa
File:                     2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa (raw, json)
Hash identifier:          s4ylaCO8Bly+EzPDGi7lOVMQ5fDkfmXdayO9+tUgSMs=
Subject key identifier:   41:2F:F6:94:5A:C0:EB:6D:E6:5F:9F:0D:2B:7B:80:96:EF:77:3C:E4
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584905B6AD652DC7422A8CBE8B80
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     393780
IP address blocks:        2602:ff26::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ad:65:2d:c7:42:2a:8c:be:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=16895536-b3db-49fa-8d9d-a40e421d6e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:e1:d5:ed:a5:e2:4b:2f:79:b9:a3:c3:50:
                    0a:df:ee:1b:89:46:79:53:b1:0c:e8:a3:c9:47:f5:
                    fb:1e:06:9c:f7:8a:39:04:5a:e2:02:15:be:92:20:
                    9a:72:6e:20:ea:7f:25:be:3e:de:de:71:fa:f9:46:
                    84:67:e4:d9:68:c2:b3:3d:df:ac:49:69:d4:99:9c:
                    73:3d:95:cd:b2:c7:11:c7:cd:9e:79:94:57:f7:96:
                    8d:87:81:6e:d5:98:b9:b0:ee:38:ff:97:83:61:34:
                    22:3a:fe:5f:7a:32:6a:f8:ac:88:09:72:c6:38:e2:
                    06:02:50:5d:33:0d:37:94:f5:23:c9:6c:c9:0d:01:
                    85:8e:3e:7c:35:51:d6:43:c2:28:58:78:5b:99:0b:
                    00:ab:e5:c4:27:0f:96:19:d4:63:f4:25:9d:b1:29:
                    80:d5:ec:fd:43:c4:08:3b:ef:68:e8:6a:08:f5:3a:
                    39:28:c1:4a:da:52:2d:01:ab:c8:67:6a:c6:3a:e1:
                    dd:3d:fd:a8:8b:47:ab:4a:2f:95:2b:4d:c6:e6:73:
                    c7:57:d4:29:7a:d7:e8:cc:23:1a:d9:6b:8b:1a:65:
                    eb:9f:e4:bb:3d:92:64:de:ba:43:e9:81:e0:ba:da:
                    41:19:7a:4e:0c:7d:11:4a:ec:af:4e:e2:3b:f8:e6:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:F6:94:5A:C0:EB:6D:E6:5F:9F:0D:2B:7B:80:96:EF:77:3C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/2a892bdf-d4f1-374b-babb-2bc3e234e3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff26::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:cd:c1:e6:3d:e8:dd:59:cd:07:91:32:1e:da:5e:2c:3b:
         73:2a:e2:94:61:8b:6c:a0:38:79:02:9a:99:96:a2:d4:4e:1e:
         46:e1:56:ae:36:07:b0:3a:6b:fb:6b:2d:2b:76:60:37:f2:69:
         b5:8c:74:b1:5f:f0:e3:8c:1e:cb:f4:0e:39:4b:b4:05:0f:17:
         0b:d4:6f:b0:20:d0:d0:b8:f2:58:f0:95:da:ce:6e:1a:21:d3:
         85:43:7a:9f:2a:96:45:62:b6:5d:e0:fc:48:09:da:c6:e5:e0:
         30:3b:82:7d:85:ae:06:21:f7:e0:e9:c9:0a:4e:ec:f9:be:39:
         6d:b1:1a:a1:42:e1:b5:a7:82:2b:1c:f8:d8:30:40:5b:1a:87:
         00:b7:4f:10:5e:f4:9b:a3:45:89:00:1a:30:c5:47:09:13:e9:
         6b:cc:a9:47:f2:59:ef:2c:4f:67:b6:e7:55:7d:ba:9a:98:67:
         cb:c4:d9:24:cb:c6:9d:b6:a1:39:e8:83:da:46:dd:c2:1d:d3:
         e8:9c:93:3f:9c:84:03:f8:f4:be:6f:a1:8a:31:16:4e:5a:01:
         00:cd:f3:91:c1:ee:c0:9e:f8:46:9d:54:22:9f:a1:e5:4b:a6:
         6f:db:c8:07:7e:2d:c6:45:85:b1:c5:c7:be:08:5d:96:26:fe:
         78:2d:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:14 2025 by rpki-client