Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
File:                     14ccf9e3-3501-3d49-b394-7e1405d6383d.roa (raw, json)
Hash identifier:          EKejaopQ6litHF8oOl31RbiKVDduBH/jRnB1uorrxu0=
Subject key identifier:   70:DA:0B:9C:A7:E2:DE:44:86:82:8F:BA:0D:07:13:82:5F:2A:E4:8D
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F432858496CE458254D32257C6175D280
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     62563
IP address blocks:        2602:fec3:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:58:25:4d:32:25:7c:61:75:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=9fe31264-a1ae-4800-815c-b0a01a493e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:63:4b:6f:b1:de:83:b8:b2:af:ea:1b:d5:96:
                    7b:91:0e:2b:f2:22:ec:ef:0f:4f:04:52:c3:35:54:
                    e3:38:93:c8:86:60:23:91:61:e4:38:bd:77:c4:e5:
                    60:ac:88:62:5c:c3:a6:a4:12:4f:89:34:07:e2:0b:
                    49:8d:25:49:48:7b:a2:a0:be:29:b2:75:8b:cf:4e:
                    a5:79:95:bb:b2:c7:96:dd:e8:fb:65:e2:fc:08:38:
                    22:ab:29:63:b1:e1:2f:d5:ac:38:15:6d:02:6b:07:
                    90:88:36:44:aa:f8:1b:9a:d6:17:26:7e:11:3c:32:
                    a1:3c:fe:7a:8f:19:3d:e9:aa:13:7b:ce:83:1b:da:
                    68:c7:e5:d4:e6:e8:82:eb:06:7a:23:39:b6:9d:60:
                    d1:d0:33:b8:84:d9:c3:0a:dc:be:18:e4:c3:a5:ad:
                    5c:41:aa:bf:26:3b:e4:9d:70:a6:1f:35:63:be:c2:
                    8c:04:a1:f1:76:9c:5a:94:af:f9:a6:a8:ce:05:8e:
                    d1:83:0a:6e:d2:e8:9a:97:0e:cc:e7:0d:ff:7c:c6:
                    cf:7b:46:99:98:21:0e:68:ec:0c:8e:e8:76:da:cb:
                    50:6f:f8:be:71:90:50:78:5b:6a:48:c6:03:65:53:
                    7f:3d:21:e7:35:97:d8:50:63:ec:e4:ea:10:cf:5e:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:0B:9C:A7:E2:DE:44:86:82:8F:BA:0D:07:13:82:5F:2A:E4:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/14ccf9e3-3501-3d49-b394-7e1405d6383d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec3:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ec:12:a9:64:af:00:6f:74:b2:33:45:ec:c8:58:77:66:cd:
         d2:85:f3:ab:eb:5c:c0:00:b2:df:90:77:5c:61:02:47:a3:83:
         a7:a5:3e:76:c9:14:dd:b2:7b:77:8c:50:ef:ff:7a:81:d8:85:
         32:a7:5a:06:81:7d:15:d4:58:ca:c4:92:c2:8b:b5:25:e0:4d:
         83:e7:0d:d5:89:c7:ca:fb:37:45:a2:3d:2d:14:45:d0:0e:10:
         24:73:3d:bb:c3:a4:a6:9f:ef:89:e9:47:cd:11:2c:ed:47:b3:
         f4:09:30:db:8b:b0:05:5f:34:f6:5e:74:4a:cb:cd:bf:7e:28:
         41:29:0d:82:fb:85:19:65:fe:68:b2:d8:e2:76:c9:55:0f:f1:
         1b:05:35:e8:85:02:fb:fa:62:aa:fe:ac:4c:88:7b:8c:27:5c:
         36:61:43:ae:aa:26:27:07:44:cf:f9:cf:7b:cd:09:a3:cb:c7:
         7f:41:bd:31:80:bb:e7:11:b3:f4:cc:1b:b8:1c:8c:98:e6:6f:
         e8:08:94:4d:35:0d:c9:46:1f:d8:92:10:bd:21:4a:2d:74:30:
         f7:29:07:28:2c:19:5b:13:93:35:7a:9d:a6:c6:9e:31:a1:25:
         89:7e:6e:b9:b1:82:ad:d7:c7:98:2f:b7:ae:3a:e6:98:60:8b:
         11:11:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:23 2025 by rpki-client