Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa
File:                     f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa (raw, json)
Hash identifier:          DMDsOinG1SUBcg4ZjMlJb3Cbuil0otvk0Qrj5YgBoxU=
Subject key identifier:   53:57:62:36:7C:14:47:87:DD:A7:D1:F6:04:65:83:05:55:81:9D:12
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F432858488AE0A355D0AE56D9C1903860
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     31867
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a3:55:d0:ae:56:d9:c1:90:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=d6d28d77-0b78-4965-9518-ede46cdd8fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6f:06:75:3c:68:e6:ea:8d:24:f9:81:f6:b6:
                    09:f7:17:37:d1:88:ab:98:fa:aa:52:0c:97:bd:f6:
                    8e:6c:97:35:d5:ba:4f:c1:4a:bc:67:db:49:6a:22:
                    fd:4a:27:c5:74:bb:b4:34:db:61:6e:d7:5c:74:68:
                    3c:e1:60:f6:75:3b:62:bd:2a:dd:1b:0f:6d:81:09:
                    6e:7e:36:2f:4a:47:20:e9:4e:15:14:e3:2e:12:87:
                    6d:70:1b:ca:6f:3b:63:da:2c:b0:72:4b:68:81:da:
                    99:ec:1a:04:a7:3f:d5:48:41:11:a6:3b:a7:f5:ed:
                    a7:0f:a1:93:e7:2b:9a:3b:99:d1:f9:cb:78:3b:3d:
                    fe:f5:6b:bb:02:b3:ea:90:38:50:17:62:69:ee:0e:
                    38:45:ff:db:14:a2:fb:2d:52:23:ff:dd:0c:4b:e2:
                    56:2e:e1:80:b2:c4:50:8e:34:f7:15:eb:93:2f:bc:
                    ad:e2:27:14:4e:5a:67:9a:44:d0:f1:8c:ac:05:13:
                    aa:38:67:88:dd:d7:84:4c:75:06:ab:3b:70:c6:2d:
                    5f:82:18:5d:ff:66:fd:fd:d4:85:11:f5:07:48:02:
                    e3:62:f5:2e:74:64:70:b1:6c:e9:25:b8:c5:a7:02:
                    eb:03:6d:e5:c6:76:a4:a4:3f:21:b2:0c:f1:bb:f9:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:57:62:36:7C:14:47:87:DD:A7:D1:F6:04:65:83:05:55:81:9D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f763cd85-323b-3d88-8c1e-a79554dc3c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:0d:7a:b0:78:64:d8:b2:7a:c5:76:73:4f:77:d1:6d:b4:
         2d:02:01:9e:eb:3e:da:b7:04:49:a4:37:ba:65:ea:f7:bc:dc:
         3f:8c:d7:d5:4a:63:be:2b:0c:f7:45:2f:b1:0f:a8:16:54:e2:
         82:03:db:fb:f7:4c:0f:9f:9a:5e:a8:dc:d2:7a:d5:51:96:b9:
         20:8d:2f:a1:0c:a6:72:c4:3f:55:82:f8:7a:70:9b:0c:f1:19:
         74:c2:1b:e4:a1:ad:d6:c3:4e:bb:51:12:ef:c0:bd:6b:5b:ef:
         cc:0e:62:91:5f:e7:ae:4f:71:a7:52:6c:70:fa:d5:6d:f1:5c:
         35:66:d5:9c:ef:84:28:7d:c6:5b:65:2f:d7:ac:58:ba:80:7a:
         3a:94:02:ee:65:cc:67:3a:0b:39:86:1b:a1:1b:8f:cf:58:d1:
         97:ad:19:ee:a9:c0:0b:34:55:0d:26:33:97:41:a3:92:90:30:
         ed:48:49:2b:4e:62:f9:ed:bc:76:ae:7f:f4:c6:b3:dc:b4:ae:
         d7:26:2e:d0:62:e5:c5:02:80:d0:c4:e8:67:f5:05:19:42:37:
         f5:7e:30:e3:48:fa:df:b7:77:f5:29:44:aa:0e:51:9b:3f:9d:
         25:e6:37:2f:df:c2:ef:c7:0f:37:70:fd:96:03:d9:99:2a:be:
         5f:d1:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:26 2025 by rpki-client