Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
File:                     700a3682-aed5-38cd-9733-139d2b4668a7.roa (raw, json)
Hash identifier:          CJh52EeUR1HhB/Reqmk9A1YR6SXGH99Au1kGQdrzkkg=
Subject key identifier:   81:A0:90:6E:47:BC:B1:7C:A5:73:6C:4E:5B:91:94:56:9B:37:AD:DD
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F432858491246A1CD5B380C444EB9FD6A
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a1:cd:5b:38:0c:44:4e:b9:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=dbc89417-2a8f-4c06-90d2-e85918a5162c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:cc:d8:ad:18:07:17:74:20:fa:96:b6:06:
                    f9:7e:91:d5:75:e5:3d:53:22:d6:82:ee:90:45:2b:
                    62:df:b6:37:b1:79:4e:38:3b:31:87:b7:ed:fb:8a:
                    d3:47:12:b9:33:f7:58:06:ed:a0:c0:c3:1e:f3:94:
                    16:7f:b0:bb:9a:8b:cd:63:2c:46:a4:b4:87:c1:e5:
                    77:47:a4:1d:28:e8:ce:f0:48:57:36:f8:21:cf:e5:
                    9a:9f:99:11:46:10:41:d1:0e:c2:70:76:c8:5f:90:
                    59:69:05:41:34:32:c6:0d:70:20:a5:32:90:d1:c2:
                    6d:8a:d4:42:cd:ec:02:33:89:25:6c:89:63:75:be:
                    e1:49:1b:54:6a:2c:b7:57:30:42:09:57:a0:1c:43:
                    05:27:27:d4:9c:77:56:13:55:0b:55:a0:d2:42:71:
                    c5:ca:d3:78:54:c0:af:0d:b8:a1:7a:1c:d4:84:f0:
                    45:aa:8e:06:3f:05:5c:ec:4a:b8:7e:79:52:21:70:
                    e4:2c:aa:ba:db:e0:1d:55:02:a2:d5:30:41:d5:18:
                    13:1d:6b:78:15:c0:2e:8b:76:b2:61:6e:de:f4:92:
                    49:ab:71:12:8c:70:c7:6f:4f:46:81:b8:33:4e:1d:
                    d0:da:e5:a6:08:32:45:70:ea:bf:f4:f8:5a:bb:a2:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A0:90:6E:47:BC:B1:7C:A5:73:6C:4E:5B:91:94:56:9B:37:AD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fa:95:de:fb:44:e3:07:4d:c3:d6:f9:50:27:fe:ea:f0:7f:
         c2:79:ce:d0:7b:1b:50:ed:72:bc:ba:36:10:34:58:9e:0a:61:
         69:5d:b4:00:f7:e0:cc:d6:3f:38:d4:ca:2c:33:03:f3:ec:7c:
         77:87:34:21:ab:ab:61:e9:aa:94:cd:3e:ed:17:2c:bc:ce:6e:
         86:aa:58:9f:d2:59:c0:01:2a:12:44:8f:42:d4:a3:e1:d8:b6:
         89:42:49:1b:c8:03:32:25:34:74:e3:09:29:32:50:8a:cf:b4:
         70:4f:37:43:4d:35:5e:d3:bd:bf:c3:08:a7:6b:1b:24:d7:b3:
         cc:eb:4d:46:d3:6b:e0:8c:ad:0b:1b:71:4f:8e:6a:7a:98:5f:
         14:b2:a1:5a:2c:c4:72:52:a1:9b:de:9d:86:de:6a:e1:7f:b4:
         d9:b6:6b:68:98:a6:54:39:6b:74:fd:c2:82:c7:a2:81:18:78:
         b5:82:3b:de:80:21:61:96:44:55:7d:82:07:58:e0:9f:c2:60:
         fd:52:46:93:da:ff:2a:45:ec:c6:40:fa:e0:8b:af:41:42:a4:
         e4:d5:99:11:89:ae:ab:f7:18:8a:99:c3:72:46:8c:7e:26:fe:
         15:09:83:27:bd:91:3e:68:1f:0d:43:dc:05:e8:bb:07:ca:d3:
         04:c0:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:56 2025 by rpki-client