Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4c881c7b-225d-3859-867e-8a8d2d4c7085.roa
File:                     4c881c7b-225d-3859-867e-8a8d2d4c7085.roa (raw, json)
Hash identifier:          yxflUcY6bRupZxogJtiCQn8qTEAko7+ekuOVH9zzRmY=
Subject key identifier:   2B:74:5C:36:10:60:2C:EB:C9:B1:81:8E:D3:FC:3A:6F:81:6D:83:90
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584A6F207784E0D09DA4EFF3A8B0
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4c881c7b-225d-3859-867e-8a8d2d4c7085.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     20473
IP address blocks:        2602:f9bd:f02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:77:84:e0:d0:9d:a4:ef:f3:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=df597d57-e259-41ca-a330-adfc036a1a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:74:f1:bf:10:9d:db:73:d1:8a:d1:be:84:
                    a7:e1:72:c6:04:fb:7f:93:6e:19:04:c7:70:2a:3d:
                    4c:d6:36:08:4f:17:7d:ea:8f:45:84:e2:32:8d:63:
                    cc:2c:b5:51:46:43:75:33:eb:60:16:9d:1b:a5:67:
                    df:24:aa:01:de:b0:29:a3:e4:be:6c:07:29:ea:ac:
                    d3:26:59:83:b0:e8:5e:13:81:83:54:0d:03:2f:50:
                    04:9a:ec:2b:9c:ec:45:77:e9:e7:c2:d5:44:64:86:
                    3a:58:26:52:50:9f:b0:2f:2c:71:d9:a7:0d:02:f4:
                    47:3d:71:b3:be:31:02:83:3a:22:af:74:3e:6b:15:
                    19:b0:ca:38:ac:d7:92:95:7a:0c:74:ec:7a:c5:32:
                    2a:5a:a9:e4:60:cb:5e:15:f5:79:a7:b9:4a:88:66:
                    26:78:47:53:c4:cd:ca:97:f8:ee:04:80:e2:74:1b:
                    bb:0f:aa:f7:17:87:a2:04:dc:97:6a:79:82:79:18:
                    97:b8:a9:5e:04:39:6c:d9:69:f0:55:13:3a:07:9e:
                    4e:8d:53:ba:b9:05:e5:2a:57:24:b2:a6:33:8e:21:
                    e5:00:17:e0:f0:bf:fe:2e:1e:0c:c2:77:e8:39:a3:
                    a5:d5:57:71:0c:e1:f0:c9:5d:52:14:b5:62:61:94:
                    b1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:5C:36:10:60:2C:EB:C9:B1:81:8E:D3:FC:3A:6F:81:6D:83:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4c881c7b-225d-3859-867e-8a8d2d4c7085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:f02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:84:ef:1a:be:c5:22:a5:b6:db:f4:df:a6:80:59:18:b0:04:
         fe:ee:6c:33:4f:68:42:82:f7:cd:8a:2f:a9:69:a4:23:c0:90:
         ac:c1:63:10:45:9a:0f:6a:22:22:36:44:46:b3:57:d4:d4:25:
         5e:ab:f8:d4:f0:6f:04:d6:e8:48:b0:5c:d2:43:d9:96:fd:62:
         2b:69:d7:d8:a9:6d:52:23:86:3c:51:cc:8a:b9:a3:ee:47:7e:
         ef:32:44:92:c9:25:98:2c:43:25:f5:b2:91:4e:d8:12:35:59:
         f4:96:84:06:b5:6c:c1:02:69:0e:20:1e:38:fc:8e:35:99:d4:
         44:e9:8f:4f:68:02:cb:7b:f7:3b:6a:45:2d:a3:3c:c7:07:68:
         80:e6:ac:ae:35:a8:c4:61:57:6b:b7:50:36:40:2d:c6:62:0d:
         42:2b:fb:59:71:be:15:f2:4c:68:af:0c:fe:90:4f:2d:73:78:
         d2:ef:11:fc:e9:ba:57:56:4f:87:05:c6:9f:8d:d5:e8:47:02:
         6b:27:58:5d:40:4f:42:9b:68:e2:34:b6:70:ee:41:ae:74:8e:
         48:67:f4:61:8e:6d:55:54:3e:18:5e:be:fb:4a:9c:ac:d0:e6:
         e9:61:ae:3e:a1:82:84:f8:f0:65:c4:ac:61:3c:b9:f6:00:f8:
         26:7c:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 00:32:51 2025 by rpki-client