Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/6f865847-fc09-31d4-a17e-efef24bacd0f.roa
File:                     6f865847-fc09-31d4-a17e-efef24bacd0f.roa (raw, json)
Hash identifier:          dDDX7JrQECtg0CuJZK/jhjhMtozPAPZHmcGTUwMllrA=
Subject key identifier:   89:86:0B:BC:56:C5:66:C2:D3:0B:17:83:E7:2D:9A:8D:4B:CC:B6:53
Certificate issuer:       /CN=de0cc6bd-e920-421b-822f-9be354b0d759
Certificate serial:       010D0C9F4328584A07D52F37D248135E5FA107A0
Authority key identifier: D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/6f865847-fc09-31d4-a17e-efef24bacd0f.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     209864
IP address blocks:        2602:fc52:310::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:2f:37:d2:48:13:5e:5f:a1:07:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=d6ed08ec-3806-46bf-a70a-503bfb099b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:3d:01:af:33:62:d7:74:3e:6f:16:32:2b:
                    cb:b1:92:7f:8d:e6:e9:91:a9:c6:34:8c:64:46:30:
                    dd:30:60:6f:62:0f:05:7a:ef:01:54:cb:3f:4f:fb:
                    4f:48:93:d9:eb:d1:17:20:11:75:93:d9:11:be:81:
                    2e:02:1a:ee:3d:5d:e9:3d:8b:9a:d3:e3:bf:a6:63:
                    60:29:a6:2a:51:fa:c5:95:e7:71:47:60:9f:71:7f:
                    2a:76:b7:e7:39:57:45:90:c4:e4:2d:2d:36:2d:81:
                    49:bd:e7:a6:40:35:49:65:a6:f8:bd:23:9a:ab:f2:
                    37:4c:e5:c6:65:b4:87:fc:3d:e4:44:e6:e5:87:b7:
                    69:32:41:ea:bb:73:d0:4e:16:c0:a4:b2:1a:dd:0e:
                    18:1c:88:ee:47:43:7d:51:99:06:4f:99:fe:45:a5:
                    0d:e5:49:14:5a:98:2e:13:eb:6a:42:ac:46:54:39:
                    63:6f:2e:fd:f5:14:19:ab:e6:0f:d4:ff:5b:79:bb:
                    9a:5b:a9:1e:34:dd:21:04:83:ec:c6:24:94:f2:fe:
                    95:4b:b2:27:99:61:59:c0:94:ee:f7:ad:4f:a9:52:
                    d5:57:c5:26:53:ce:75:da:06:b8:e7:68:02:e6:41:
                    01:aa:d3:04:30:c4:67:13:3b:1b:32:ab:b2:11:c0:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:0B:BC:56:C5:66:C2:D3:0B:17:83:E7:2D:9A:8D:4B:CC:B6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/6f865847-fc09-31d4-a17e-efef24bacd0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.crl

            X509v3 Authority Key Identifier:
                keyid:D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc52:310::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:24:df:fb:fa:0f:51:08:63:75:32:91:eb:b0:45:4c:29:0c:
         f2:04:05:cf:94:a8:f9:7e:a1:82:d2:11:12:92:be:60:41:bc:
         c9:77:a4:39:81:16:69:96:69:5e:17:03:ab:23:96:1a:5a:21:
         7c:89:c1:6a:66:3a:c2:b0:76:32:d9:1a:ae:68:ac:b2:65:04:
         44:e6:93:6d:f4:e9:68:0f:c6:49:5c:4a:52:5e:15:27:02:0e:
         e9:9c:eb:de:3e:36:c7:4b:c5:70:e3:3f:ff:c7:b8:b5:4f:8d:
         06:52:ca:57:b8:3d:4b:e9:4c:57:99:06:9f:a7:f0:a8:bb:47:
         b6:1b:5b:62:a3:56:64:3c:ff:3b:a4:d2:be:40:7f:3a:5b:4f:
         54:dc:d4:e9:23:d0:4e:b0:a6:c8:20:1f:24:df:aa:39:4b:3f:
         3b:dd:57:73:60:85:59:ec:62:81:27:74:a0:99:bf:58:f5:37:
         63:52:43:03:8f:e3:a9:43:29:e4:83:07:81:07:83:ed:7a:01:
         41:4a:be:d5:eb:de:8b:80:71:05:ac:ed:92:1c:ea:da:e1:e3:
         b9:65:d5:1e:45:1f:19:7a:3c:65:66:ed:8e:af:a7:d3:9b:32:
         a4:97:fc:ab:08:80:9b:34:7e:48:87:15:6a:dc:84:04:db:b4:
         97:3c:66:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:35:35 2025 by rpki-client