Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/04a58d26-994b-3b9d-a4b1-81e0c6b74f29.roa
File:                     04a58d26-994b-3b9d-a4b1-81e0c6b74f29.roa (raw, json)
Hash identifier:          30P+WVh0jK/646oDnFAXEh0qGOaVUco0QIAhZvKiiZM=
Subject key identifier:   6A:61:CD:62:02:29:BC:E0:38:9A:C9:B7:7F:33:FA:65:FE:22:09:DA
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F43285849657FF56D1D39709137F45600
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/04a58d26-994b-3b9d-a4b1-81e0c6b74f29.roa
Signing time:             Wed 02 Apr 2025 21:28:17 +0000
ROA not before:           Wed 02 Apr 2025 21:28:17 +0000
ROA not after:            Tue 01 Jul 2025 21:28:17 +0000
asID:                     3819
IP address blocks:        2602:f69a:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:7f:f5:6d:1d:39:70:91:37:f4:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Apr  2 21:28:17 2025 GMT
            Not After : Jul  1 21:28:17 2025 GMT
        Subject: CN=62be98b9-f765-48d4-b0cb-d1682ad17b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:b8:fe:a2:71:65:d8:95:a0:fe:d2:d5:28:
                    e3:32:8c:ab:26:14:35:61:6e:d1:b8:a8:3f:4f:82:
                    3d:1f:14:ad:88:4c:a8:06:d5:10:cf:62:3b:67:5a:
                    3b:1c:bc:18:77:64:70:70:18:53:25:6e:e4:50:08:
                    35:f4:25:e6:aa:ed:22:2c:12:78:53:29:b2:24:4d:
                    e4:be:1b:8b:3b:88:dc:44:8f:5b:db:c9:45:6b:5f:
                    f4:69:37:ec:96:2a:47:f1:63:03:4a:49:9c:bd:d3:
                    1c:66:f9:59:7e:02:15:ca:20:aa:64:ae:64:e9:8d:
                    0f:bf:18:72:fe:b8:bb:6f:98:ad:bf:4e:54:66:79:
                    f5:15:24:47:46:fd:f9:95:21:79:9a:53:67:19:04:
                    d1:32:4a:26:63:81:64:34:95:49:96:53:e6:e7:97:
                    63:42:5d:cc:88:5e:30:3b:c4:59:8e:8d:94:04:ef:
                    1e:34:86:93:a9:d2:0a:b5:41:98:b1:65:48:42:1a:
                    51:1a:92:45:ff:2c:b4:40:66:bc:53:6a:89:cb:d5:
                    b2:f1:8d:81:ed:b1:40:19:88:2f:62:e7:c9:ac:ba:
                    6f:91:51:b5:0e:57:4a:4c:d5:7c:f3:fd:1f:70:34:
                    a3:ec:9e:5a:66:f6:9b:8b:dc:cd:7a:a8:5d:c7:b6:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:CD:62:02:29:BC:E0:38:9A:C9:B7:7F:33:FA:65:FE:22:09:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/04a58d26-994b-3b9d-a4b1-81e0c6b74f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:6a:8d:1d:3f:9f:dc:a4:60:d4:09:6d:a3:fb:5a:0f:e6:
         75:e5:e0:e2:a1:e8:63:14:b3:0a:5b:43:4a:5d:d4:35:99:3d:
         ee:e0:c7:95:38:52:8e:df:3c:91:01:87:a6:23:4d:6d:88:23:
         23:5d:21:0f:4d:f9:f9:28:ea:41:37:87:07:63:97:fd:a2:a2:
         0c:28:3b:b1:83:32:72:be:64:2c:88:1e:db:25:51:b8:cd:05:
         3d:d1:53:ec:d0:db:39:e0:fa:50:83:49:af:c7:81:72:f2:1e:
         55:10:9d:10:2d:1e:98:0a:2a:d5:d8:25:af:26:e8:f5:b2:a0:
         a8:f9:f1:4d:c9:1f:de:02:ed:38:86:0a:2a:c8:45:37:fe:60:
         b6:b4:75:84:d1:9d:88:f5:37:50:85:51:c1:2b:30:52:7c:b5:
         d1:63:69:2a:dc:0b:64:37:eb:a1:68:c4:60:c8:c7:81:57:8b:
         2d:08:47:3b:2e:a8:19:a6:dc:77:20:01:dc:0f:b3:43:d2:b8:
         88:ce:44:58:00:2b:1a:67:e9:ab:3d:cd:67:d0:37:4b:a6:19:
         dc:11:dd:d1:a2:e8:21:ce:0e:24:c0:79:cc:9f:10:33:77:99:
         87:d7:33:8b:ca:5e:66:27:45:16:42:98:e9:33:b6:1f:44:81:
         17:8c:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:08:05 2025 by rpki-client