Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
File:                     30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa (raw, json)
Hash identifier:          rhetrMcDJO8BsTU367SpHMgdzScE5KC5C2rust5un8s=
Subject key identifier:   39:02:C0:1B:AD:AF:2D:94:E5:78:B5:9E:FC:A4:0D:C2:8A:46:59:B2
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285848E59BB776E80E8B6F44F42448
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        2602:fd5e:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b7:76:e8:0e:8b:6f:44:f4:24:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=5003fbba-0381-4484-83a9-7b9dd762eca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:2d:55:f0:da:58:fd:7b:8b:70:21:00:a9:
                    7e:ec:f6:86:1d:89:f7:67:c0:26:a4:ee:0e:e8:21:
                    b3:35:84:8b:30:fc:fc:91:e9:e4:20:bd:78:a5:2d:
                    62:36:31:f2:d5:e6:5e:d8:fb:e9:42:40:9a:d2:36:
                    22:4d:a1:5d:bc:4b:7a:33:5d:35:ff:1c:e1:18:49:
                    e0:72:ac:f3:de:fe:3a:5a:44:86:4b:a3:fd:9c:f2:
                    f0:49:5a:21:72:b3:77:e5:02:5e:ae:40:73:1c:1d:
                    3b:41:75:58:0a:c9:cf:eb:9a:29:6e:b8:c8:a4:7f:
                    70:fd:73:8d:68:b2:a7:1b:d0:c5:fa:56:bd:4a:9e:
                    f3:24:30:9d:3e:70:e8:73:a5:ed:f5:f1:7e:ce:05:
                    07:44:97:2f:83:ae:af:31:db:23:ca:e6:73:c9:ec:
                    3f:9d:3a:c3:32:fc:46:37:7a:07:cc:a2:c8:7c:35:
                    86:3e:36:59:81:45:23:00:03:57:0c:10:12:cc:0e:
                    51:2b:1d:f8:a0:2b:ef:b8:21:2a:88:c3:83:f9:98:
                    47:04:a6:d3:aa:4e:84:50:8b:22:f9:82:dc:ae:44:
                    cd:f5:1f:fe:57:6c:4d:6d:75:4d:4f:d7:4c:c9:e7:
                    b1:c8:3e:aa:37:8c:85:d4:bd:01:9e:e8:c2:0c:74:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:C0:1B:AD:AF:2D:94:E5:78:B5:9E:FC:A4:0D:C2:8A:46:59:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/30b359ba-bc9c-3d0e-90e6-71751be9d1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd5e:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:c5:3b:c7:c4:99:73:2c:3a:32:1b:c8:86:ee:3b:73:48:55:
         9b:48:43:f8:44:00:59:21:7c:f6:10:d3:73:70:f4:d6:cc:72:
         25:5c:c9:56:f2:5e:fb:6a:43:5f:b3:d7:bf:ba:41:bd:2a:bf:
         48:18:aa:06:e8:2e:f5:d9:07:84:52:65:e4:dc:88:9f:3a:9f:
         0d:a4:94:10:78:d4:09:21:69:a1:e0:08:c0:1e:5f:1e:50:77:
         86:52:b1:fe:f8:fa:61:a1:b5:ed:d1:48:c3:47:21:f8:4c:e7:
         aa:a4:65:12:ac:6f:d6:0a:68:48:69:8c:05:40:e9:bb:82:63:
         99:38:6a:41:25:a5:32:b1:d6:c8:4c:8b:06:94:2e:96:80:7f:
         eb:14:3c:08:dd:32:de:76:14:b3:63:fe:65:eb:0e:44:b9:eb:
         f6:02:67:3b:82:72:fe:eb:26:e7:34:fe:f9:3a:b5:32:16:77:
         1a:ab:9a:28:9b:0c:3b:0b:9c:89:93:ae:07:69:a4:93:9e:63:
         09:98:41:40:43:bb:35:9d:14:7c:af:71:83:ea:b6:95:a8:5d:
         dc:d1:f0:b3:67:c6:92:44:c7:3a:47:10:ed:d3:79:22:1e:6f:
         a4:fe:48:b9:95:f1:0b:cb:fc:83:eb:56:63:f1:86:9c:48:3c:
         6b:27:55:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:52 2025 by rpki-client