Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
File:                     c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa (raw, json)
Hash identifier:          FaFrP5gLMvwGh/SrVqr2UC8InGotNumFVC93+r4R5L0=
Subject key identifier:   B1:76:6C:1D:A4:06:E3:24:DC:4A:54:55:88:5E:73:C0:95:EB:7B:4C
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F4328584909E69FE5DD681B96E8D7EC40
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     36369
IP address blocks:        2602:fe69:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:9f:e5:dd:68:1b:96:e8:d7:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=550e8ed2-a823-48f9-bb08-99b6ca1f309c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:1c:cf:b9:92:bd:99:2e:cd:e7:4c:c4:87:
                    00:26:6e:8e:cf:01:05:4a:2f:a2:9d:81:28:2b:fb:
                    64:02:09:a1:f6:2c:4d:e5:8f:80:12:d4:a1:31:6a:
                    6d:92:ad:0c:9f:3d:f3:4b:af:38:f8:96:1c:25:78:
                    dc:9b:a2:c2:a1:ee:ac:dc:0e:56:be:93:f9:f4:3f:
                    f0:93:c4:14:a8:f0:7b:38:6a:d1:1b:75:4e:8d:12:
                    53:2c:51:57:9e:f9:d6:3c:4c:63:c9:db:47:ac:a6:
                    f5:05:a9:ea:52:69:89:85:5c:20:aa:e7:84:96:86:
                    8b:9c:14:6e:f8:dd:4b:a4:8d:c9:65:1e:7e:90:a0:
                    64:97:6f:ac:93:b5:bc:4c:0c:21:05:56:90:8c:ec:
                    92:97:3e:66:1b:06:5d:ff:a9:a7:fe:f4:90:e6:8e:
                    56:ee:95:c1:4d:1f:68:c6:23:9f:09:4b:df:04:ac:
                    09:0e:d8:57:99:ec:04:1e:a8:54:eb:a3:4d:e6:0d:
                    c7:b8:49:af:7f:54:45:fe:a7:ea:2f:2e:1e:18:fa:
                    53:32:eb:be:f2:bb:6a:e2:44:41:97:13:50:ac:42:
                    a3:3a:0a:b8:ee:63:77:85:a5:d7:d2:fa:fe:69:e7:
                    a4:6c:92:3a:de:12:69:c4:59:d4:74:77:18:2a:db:
                    41:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:76:6C:1D:A4:06:E3:24:DC:4A:54:55:88:5E:73:C0:95:EB:7B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/c9e79515-2e65-3b9a-a5cd-2a1d9dd05c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:58:96:8a:b0:af:a1:e4:14:1e:d6:5c:c0:32:dc:b4:9d:
         df:03:09:22:ea:f5:93:4d:73:01:0f:77:4b:04:da:81:55:34:
         32:5f:bf:10:37:32:74:ce:f8:b5:92:c4:e5:ff:d2:6e:50:ba:
         6e:c6:2e:cf:a3:f7:b2:53:e1:8a:07:66:e8:e5:db:00:45:03:
         7e:bd:c2:97:f4:2a:5e:18:63:2f:93:f9:38:c3:bd:96:de:04:
         9b:7d:2b:01:36:c3:59:51:91:26:20:88:4a:64:69:08:f9:f3:
         4a:5c:ea:9a:17:64:28:f0:45:81:08:b1:62:3c:4d:e1:6f:d7:
         8d:2d:f2:4c:24:51:42:ae:f0:85:52:fd:8f:de:65:7f:52:a9:
         42:62:a9:3f:56:f3:2c:79:f7:78:24:5a:40:8b:ee:b3:b0:4a:
         79:c1:3c:57:d1:d7:cd:17:6a:c3:35:8f:e0:5a:a0:29:7c:01:
         08:07:e6:40:8f:40:a1:13:ed:dc:08:ba:ef:40:58:47:63:6a:
         7b:84:06:03:54:3e:06:07:c1:cd:09:51:53:69:d9:67:3d:0f:
         3d:1b:e3:87:ee:ae:14:93:4d:31:17:ee:69:8c:f2:ec:c7:0e:
         2e:8c:3b:0c:a6:cd:3e:8e:12:a5:8a:8f:17:a5:ec:8e:d2:df:
         57:2c:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:36:01 2025 by rpki-client