Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/0ca73c7c-c48f-3bca-b271-91a03bfab128.roa
File:                     0ca73c7c-c48f-3bca-b271-91a03bfab128.roa (raw, json)
Hash identifier:          enPxYxjbk10Jxh83bu0Hnh5xQZsTyiYHYJC54rxNO60=
Subject key identifier:   85:C1:79:1C:23:83:78:CD:EE:48:26:C5:4F:E1:19:B1:3E:4B:41:EA
Certificate issuer:       /CN=e0803549-b2b8-455b-aa30-5e7d86b2fd59
Certificate serial:       010D0C9F432858492D2968F34459A37B5A13BE80
Authority key identifier: CA:C2:DD:5B:2B:10:BE:EF:77:1C:3B:D3:92:23:32:A5:59:B7:C7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/0ca73c7c-c48f-3bca-b271-91a03bfab128.roa
Signing time:             Thu 13 Mar 2025 17:08:38 +0000
ROA not before:           Thu 13 Mar 2025 17:08:38 +0000
ROA not after:            Wed 11 Jun 2025 17:08:38 +0000
asID:                     393772
IP address blocks:        2602:f6bd::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:29:68:f3:44:59:a3:7b:5a:13:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0803549-b2b8-455b-aa30-5e7d86b2fd59
        Validity
            Not Before: Mar 13 17:08:38 2025 GMT
            Not After : Jun 11 17:08:38 2025 GMT
        Subject: CN=4a4d131c-8bb8-440f-866a-553001ba6ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:71:4c:ec:b3:51:ce:84:8e:98:60:2d:ad:
                    2a:b5:41:5f:83:e2:76:bd:a5:6c:d4:d3:2d:d7:58:
                    49:60:5a:57:0a:52:fc:73:90:5b:d5:1d:bd:d1:2c:
                    db:24:10:85:24:16:ed:e3:76:7a:f4:55:a3:af:2c:
                    c5:7e:cc:5d:cc:c9:76:92:c2:13:94:40:cd:03:72:
                    1c:4e:ab:7d:8c:48:c4:ab:5b:4c:17:ea:06:a2:6a:
                    58:a2:9b:3d:b8:b4:c3:9a:c9:c9:bf:52:48:48:ce:
                    b0:56:eb:fa:96:11:86:3f:d4:f8:4d:3f:04:36:85:
                    6b:a2:98:10:d0:2d:68:04:d0:f8:b2:95:90:02:8d:
                    2a:7d:0c:bf:9e:9b:bf:3f:e7:4a:c4:08:52:ee:6c:
                    c3:1d:c4:c3:f0:f2:e0:c6:de:22:b6:38:08:ad:ec:
                    b9:32:25:9d:bc:fe:55:64:d7:88:72:bd:6d:26:d8:
                    bf:3b:08:23:f1:95:8d:66:3e:5a:4c:b8:a9:bb:c8:
                    70:65:5d:d2:71:de:55:4e:6c:20:5d:e9:1b:f9:df:
                    7e:67:b2:20:ac:cb:78:5d:ee:40:a9:d1:c3:a2:80:
                    38:54:ec:0c:fb:67:63:62:f5:62:e7:34:6a:32:59:
                    6f:c4:5d:7b:0e:9e:c6:1a:dd:32:ac:4d:a5:97:5d:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:79:1C:23:83:78:CD:EE:48:26:C5:4F:E1:19:B1:3E:4B:41:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/0ca73c7c-c48f-3bca-b271-91a03bfab128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59/e0803549-b2b8-455b-aa30-5e7d86b2fd59.crl

            X509v3 Authority Key Identifier:
                keyid:CA:C2:DD:5B:2B:10:BE:EF:77:1C:3B:D3:92:23:32:A5:59:B7:C7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e0803549-b2b8-455b-aa30-5e7d86b2fd59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6bd::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:e6:fa:20:ac:9c:e0:b3:b9:bd:63:41:ee:1e:1b:41:5a:
         6a:ff:14:27:f8:35:ba:df:96:cd:8f:98:b3:84:27:bb:3e:03:
         8e:14:16:84:b1:e1:b2:38:4d:75:d9:fb:22:dc:74:da:a4:d7:
         20:b0:5c:d8:c8:49:e4:c3:78:55:a3:ce:8f:67:ca:5c:84:15:
         6b:96:ac:31:05:4d:0a:2f:c3:61:59:eb:17:e5:cd:3f:82:8f:
         53:44:30:3c:e0:d5:7e:4e:b6:6a:89:fc:41:60:25:cf:03:9b:
         c9:47:36:2c:60:69:e1:7f:15:53:66:24:e6:77:9c:bd:4c:7b:
         2e:dd:34:01:3f:c7:a9:f5:c4:3c:2e:0f:50:bd:a2:67:e8:f0:
         bf:47:f3:06:45:b2:d2:64:70:47:b1:16:66:e3:77:90:15:7f:
         d6:52:55:80:3d:ac:f3:3c:6a:3f:1f:85:ec:e1:e2:af:19:50:
         49:a2:d8:7c:f6:6f:8c:14:2c:0d:9a:d8:ca:d5:3a:a8:5d:23:
         80:1d:00:a1:49:03:5f:09:13:b7:d1:26:d3:0c:55:17:f3:87:
         06:73:8f:34:13:41:c5:38:76:2d:e5:1d:e6:e2:b0:f0:c1:70:
         33:3d:d2:40:96:9d:31:af:a1:ff:b2:23:62:5a:08:7a:45:16:
         f9:66:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:58:38 2025 by rpki-client