Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/8f2bdbad-74e3-3f41-a48b-2a9d326ceec1.roa
File:                     8f2bdbad-74e3-3f41-a48b-2a9d326ceec1.roa (raw, json)
Hash identifier:          0HAywpdlU0hMvLiKlgrU0ENoOh7rdOzFhgrGICxtLIs=
Subject key identifier:   C7:3F:2E:4F:B3:0E:BD:A1:0F:C3:D0:9A:2E:7E:7E:DC:47:61:21:16
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584A66C072C29F90D67EB20EDFD0
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/8f2bdbad-74e3-3f41-a48b-2a9d326ceec1.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     1024
IP address blocks:        2602:fca7:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:72:c2:9f:90:d6:7e:b2:0e:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=b66cb680-1df8-459d-8f56-44c6e9532a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:19:3d:b3:2f:77:27:1f:a5:99:0f:30:fc:
                    e0:8c:72:13:d4:dc:d8:47:1f:b6:8e:42:fc:cb:e4:
                    03:6b:cf:74:0b:3d:36:64:d2:33:6e:38:99:14:cf:
                    8f:8c:43:2d:03:dc:ee:76:6d:fc:88:dc:f5:25:00:
                    aa:4f:7b:5f:20:fb:85:a2:92:00:8f:a8:29:90:58:
                    cd:04:3e:32:39:8f:89:eb:ae:dd:44:3a:76:f6:a9:
                    d8:a5:85:a1:72:0c:b6:cc:25:56:17:2f:35:32:05:
                    87:0e:d8:20:0a:b3:d6:b4:a2:a6:da:3a:ff:8a:d5:
                    ea:48:37:db:14:9e:84:72:10:21:6c:88:29:3e:eb:
                    e2:14:56:31:72:86:3a:6c:6b:bb:6a:65:60:1f:0d:
                    b0:c2:a0:0a:03:97:0e:1b:92:a8:d4:9f:2b:1f:99:
                    7c:d9:fa:86:16:99:c1:74:9f:02:79:84:04:c2:e2:
                    8e:78:c2:28:de:01:b1:3a:c4:96:a5:6c:33:8c:25:
                    f5:99:9d:8e:7e:f5:1b:76:70:b2:a8:24:3a:ca:4d:
                    a8:3d:f6:fa:49:b4:e4:fc:c9:15:34:61:0f:00:96:
                    59:b0:77:30:1f:b0:f5:61:05:48:7d:17:7d:19:0c:
                    46:cf:51:60:a0:d0:c8:59:ee:c6:b6:75:51:ce:80:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3F:2E:4F:B3:0E:BD:A1:0F:C3:D0:9A:2E:7E:7E:DC:47:61:21:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/8f2bdbad-74e3-3f41-a48b-2a9d326ceec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b2:ae:ad:02:7e:88:eb:d2:a4:a2:48:7c:fa:f8:e2:da:53:
         cc:be:e8:74:0a:96:ef:86:f6:06:45:74:a6:d4:89:93:ab:23:
         31:5b:ca:ba:73:60:9f:a7:70:5d:62:25:d1:9f:9c:53:a9:a5:
         4f:0f:8f:6d:be:41:d1:26:8a:b0:ae:51:7a:7b:dc:ee:53:7b:
         52:46:88:95:f0:6e:a7:75:00:c9:e2:6b:81:5c:a1:91:61:52:
         20:dc:d5:8a:09:bd:e2:a5:25:06:6d:1b:ea:7f:d8:78:95:93:
         6b:cb:d2:f9:39:48:e1:1f:66:04:6c:c9:ec:d2:75:df:a6:72:
         dd:8a:d3:7b:b0:8f:51:f6:57:7e:50:f2:70:30:0e:29:de:e8:
         b6:2a:fb:00:bb:a3:76:bd:04:5f:38:99:21:df:0f:c7:6b:31:
         d2:7f:eb:7a:86:8f:93:31:9e:45:c9:5c:42:0e:2d:1a:3f:57:
         93:ee:5e:0d:32:06:8c:ed:83:e3:13:74:a1:d6:2f:6c:59:70:
         27:44:8e:c5:a9:ee:1b:5e:c0:fe:cf:ca:8e:f5:7b:8f:c1:4b:
         b1:78:c1:27:23:e5:c4:96:0a:d8:4a:a8:15:f8:13:87:7e:29:
         54:b9:a6:41:93:d8:e0:75:70:6d:e7:34:e6:5e:92:e0:b3:40:
         f3:4c:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 15:33:06 2025 by rpki-client