Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa
File:                     70e56076-63e9-33d3-adbf-59ea8c937fe4.roa (raw, json)
Hash identifier:          uwfqguvXGESd6VtJ7d8Xfl287OJ3UfDFkpPekXDf46w=
Subject key identifier:   F1:2C:16:2C:79:DF:C5:4E:6B:64:27:42:35:1E:CE:EB:11:CE:6B:20
Certificate issuer:       /CN=52902e09-5b36-4abe-835d-b0750f2ec293
Certificate serial:       010D0C9F432858496CF3B954A0DA606A88EB2F00
Authority key identifier: 66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa
Signing time:             Sat 05 Apr 2025 13:32:12 +0000
ROA not before:           Sat 05 Apr 2025 13:32:12 +0000
ROA not after:            Fri 04 Jul 2025 13:32:12 +0000
asID:                     32434
IP address blocks:        2602:f6a8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:f3:b9:54:a0:da:60:6a:88:eb:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52902e09-5b36-4abe-835d-b0750f2ec293
        Validity
            Not Before: Apr  5 13:32:12 2025 GMT
            Not After : Jul  4 13:32:12 2025 GMT
        Subject: CN=95c911bf-69f9-4d3d-bdc8-f32502065c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:79:3f:46:a1:75:f3:50:c1:7b:dc:b8:2f:
                    bf:38:07:a2:4c:87:46:73:e7:c5:c2:aa:64:12:e3:
                    fa:66:de:3e:57:e6:14:5a:64:b9:0a:4a:34:e2:67:
                    e1:9c:f4:eb:a4:4d:4f:9a:3c:d5:d5:dc:f0:f2:08:
                    fb:31:b9:48:7f:14:f6:d4:7f:3a:93:29:83:ff:69:
                    8c:68:fa:7c:7c:9f:c9:87:23:1a:8f:f2:d0:ee:55:
                    08:62:6c:8c:a6:08:24:e8:fa:e9:c1:3b:58:7e:13:
                    cc:e9:57:ba:9d:b3:7e:3d:1e:17:35:e8:f2:b0:86:
                    93:d9:5e:bb:bf:fd:d8:88:54:ec:3e:35:40:24:bd:
                    7c:b5:f6:96:3d:cd:19:99:b2:9e:22:84:65:cf:09:
                    7e:b5:82:e1:cd:a5:59:88:77:9e:71:59:00:02:41:
                    47:93:82:1e:e1:e9:32:89:88:3a:ba:0f:61:80:05:
                    5f:a5:56:90:6f:34:8e:02:2c:92:13:00:d0:dd:32:
                    fe:da:35:e2:06:ab:f5:28:b2:2a:8b:0e:4d:68:6a:
                    4a:0e:9d:a5:4c:2a:5f:af:38:d7:08:22:64:26:35:
                    60:d2:07:f3:3c:6a:de:18:b3:44:80:49:8b:8f:a8:
                    ca:85:2a:6b:d4:c0:bb:7d:3f:d0:f6:1a:41:9d:1d:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2C:16:2C:79:DF:C5:4E:6B:64:27:42:35:1E:CE:EB:11:CE:6B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/70e56076-63e9-33d3-adbf-59ea8c937fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293/52902e09-5b36-4abe-835d-b0750f2ec293.crl

            X509v3 Authority Key Identifier:
                keyid:66:AC:2E:2B:C3:2A:75:B8:FD:BF:31:EF:59:64:15:7E:75:F3:B0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/52902e09-5b36-4abe-835d-b0750f2ec293.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6a8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:78:94:65:ce:9e:f8:91:60:06:58:eb:da:a2:5a:70:52:02:
         e0:19:93:7d:a8:03:9f:36:4d:28:cf:1b:57:b6:62:1f:3e:69:
         d2:75:82:ac:c7:44:a0:9c:05:ed:42:ec:d6:b8:97:1f:59:2a:
         ec:9d:d1:e8:41:9a:d4:b8:e4:48:d0:b2:31:12:9e:53:2b:81:
         1a:e8:db:5b:47:33:0d:4b:17:2d:ed:a3:19:7a:98:33:55:90:
         90:a6:d0:16:a2:e3:7c:fd:98:25:47:88:5e:56:17:88:b4:27:
         bd:32:7d:97:f4:f8:e7:54:5b:8a:5f:78:b1:f7:14:12:2b:fa:
         ea:28:ba:8c:2c:6b:7a:8f:cc:96:d2:f2:25:af:d2:f5:2d:e5:
         46:1d:bf:12:4a:53:9c:18:0c:79:2a:97:5b:ac:0b:7c:53:8a:
         fb:30:25:b6:2e:19:83:8f:6b:89:d8:92:62:07:6a:ea:00:e5:
         57:84:da:86:cd:e7:2e:df:f5:93:a1:6a:8f:19:54:bc:c3:a1:
         8b:18:8b:c7:a9:bc:ba:d3:c0:ec:a9:89:81:fd:de:87:fc:7c:
         2a:0d:7a:21:4d:d2:b4:ca:16:dd:cf:ae:c0:5d:8a:7a:39:d3:
         e6:55:e3:48:c8:42:c1:c2:11:c7:af:b7:7d:f7:94:28:bc:c5:
         e2:36:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:32 2025 by rpki-client