Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/848d3500-c72c-3876-9948-663c8d41caf9.roa
File:                     848d3500-c72c-3876-9948-663c8d41caf9.roa (raw, json)
Hash identifier:          v6iPXSEGfCaNmhZfh3bcTIGVd7Yicl4NubTtTW4pPSY=
Subject key identifier:   C9:86:F4:CF:E6:05:A2:75:F2:F8:5E:33:C0:D5:E9:3D:E2:6E:B6:E0
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F43285849E7BA68486E5659A80A629200
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/848d3500-c72c-3876-9948-663c8d41caf9.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     46793
IP address blocks:        2602:fd75::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:68:48:6e:56:59:a8:0a:62:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=86aada39-e045-4a7f-a4f3-53721a632019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:55:f8:7f:c7:2e:20:1c:7a:be:9a:f1:30:
                    fb:5d:31:41:c4:84:77:d1:00:ef:ea:01:9a:96:8d:
                    75:eb:f1:95:7d:61:47:cb:71:a4:46:1e:a1:68:f3:
                    53:8a:08:96:02:fe:be:82:40:3c:08:47:91:4c:20:
                    f6:dd:19:ce:64:16:31:95:67:bc:01:6c:8f:e5:d4:
                    66:7e:3b:95:58:f7:b6:4d:29:5d:65:d3:ce:f5:1b:
                    23:56:e4:40:2c:91:6b:05:fa:31:10:2d:dc:8f:44:
                    f7:e1:33:6a:a7:84:5f:c6:29:76:3a:97:67:bf:10:
                    ec:1d:81:94:4c:9d:04:18:c8:29:bf:f1:7b:d2:98:
                    37:7a:dd:e4:be:9a:e1:23:03:b1:4d:cf:25:f9:12:
                    3a:c7:68:f6:f4:ac:91:a2:04:99:2e:61:66:89:df:
                    48:14:fa:54:b5:35:13:e1:42:8d:c5:4c:06:a3:26:
                    77:d5:b8:cf:ea:63:9a:31:c0:c9:61:91:ab:85:0f:
                    f1:9e:59:c7:ac:13:eb:3c:49:95:d0:75:74:c8:94:
                    02:74:99:2b:b0:3e:11:c7:b8:e3:79:18:48:e6:8f:
                    aa:05:f7:48:03:de:c7:3b:92:04:43:fb:72:33:33:
                    43:0c:93:86:4b:cf:fb:b6:64:e0:0b:62:95:9d:69:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:F4:CF:E6:05:A2:75:F2:F8:5E:33:C0:D5:E9:3D:E2:6E:B6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/848d3500-c72c-3876-9948-663c8d41caf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier:
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd75::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:3c:e3:af:80:d2:9f:2a:de:d5:33:77:a4:dc:15:d7:d4:
         1a:65:fe:dc:52:60:8a:3a:e6:28:ab:0c:2b:df:bc:e3:d7:2c:
         6b:31:23:2c:d9:c5:2b:52:04:10:34:5f:ef:a9:e8:95:37:0a:
         7d:04:71:d0:85:48:05:a7:4b:8b:c1:78:b5:58:5c:d5:c6:a5:
         ec:ae:9b:4e:b0:7a:79:23:a7:59:46:59:c1:91:91:56:c9:98:
         de:b1:f3:08:69:c0:a5:9b:fc:a5:3c:f8:b3:bc:d3:15:c9:33:
         b5:de:2d:8e:e2:1b:37:68:c5:e2:a4:08:80:c0:84:9b:04:ae:
         cd:d1:8a:03:18:b1:fd:43:c8:f0:b7:48:3a:74:8b:07:67:68:
         51:31:1d:73:58:49:47:a1:8a:31:9f:bc:b0:2e:ab:b2:96:02:
         3c:67:fa:6c:27:f8:8f:29:8e:28:ff:d0:83:00:2d:19:f8:09:
         e9:ac:72:e4:a6:24:ae:32:89:65:83:0a:74:13:41:f8:20:e2:
         29:fd:43:60:e6:7a:31:f5:20:f5:7d:64:db:d2:a6:d6:13:64:
         0d:4a:db:28:0e:df:3f:8a:83:e9:6c:96:27:4b:79:51:09:08:
         9a:35:90:8a:d1:ee:4f:c4:ea:77:79:44:e6:9c:cf:65:6b:7c:
         52:aa:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:56:34 2025 by rpki-client