Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa
File:                     98f07a54-fd37-366b-985a-6ff2929fd984.roa (raw, json)
Hash identifier:          GcbIzRNItZrg8uRV3UJiPqo7H1ydtjigos1s8grjqb8=
Subject key identifier:   A8:A2:11:6A:AF:C8:BA:E5:A2:5D:04:C0:44:B5:7D:96:52:81:5F:F4
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F4328584A23C01789EDDF24158FF02D00
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:80f:900c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:17:89:ed:df:24:15:8f:f0:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ee1c8681-2d7e-4337-b861-dd1d909d42dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:62:31:c4:87:70:ff:6c:a5:39:55:2c:1c:
                    26:f5:5a:76:1c:03:98:65:75:18:2f:f9:7f:4d:c2:
                    e6:ba:d2:d4:01:0d:e6:c1:0a:59:e8:b5:3c:49:e4:
                    92:0f:10:a0:6d:96:f8:03:42:8a:c2:e5:b5:51:e1:
                    44:39:4c:ea:e3:89:f5:9d:af:06:69:1d:22:fb:0c:
                    cf:cd:bf:24:dd:2b:a2:8e:75:cb:8f:41:b9:85:a1:
                    ee:ad:2c:b2:e0:a9:63:21:a6:56:2f:e2:f0:e8:df:
                    fb:d1:2c:31:50:8a:94:43:32:0b:6a:38:8b:ee:e8:
                    b3:19:a7:94:bb:cd:a9:9c:ec:8e:57:55:da:72:94:
                    cf:b2:54:07:f7:19:56:0c:ef:78:e4:78:d3:0a:d0:
                    aa:0f:c7:c3:7f:1d:9a:3e:da:0d:7b:3a:59:dc:ab:
                    ef:68:1f:bb:40:46:63:9b:ff:dd:9c:70:bc:ad:c4:
                    c2:c8:56:e6:75:29:74:a7:c9:53:b2:c2:c7:1c:20:
                    a4:1a:a5:1e:b5:42:1c:56:c2:43:60:eb:7e:fc:c8:
                    70:ec:e7:a5:e0:20:c8:4c:b6:7f:13:58:51:76:30:
                    ee:df:3b:99:fd:37:bd:e3:9a:08:80:67:b2:ae:d5:
                    be:67:21:8c:63:4d:02:21:e7:ba:3f:50:ec:50:ae:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:11:6A:AF:C8:BA:E5:A2:5D:04:C0:44:B5:7D:96:52:81:5F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/98f07a54-fd37-366b-985a-6ff2929fd984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:900c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:2a:69:75:e1:29:ea:9a:65:fa:7b:01:fd:0f:e2:43:7d:
         86:3e:47:3e:ae:26:85:e4:03:92:5c:a3:65:40:fc:29:9f:4b:
         49:94:ac:83:46:50:af:69:07:7e:01:65:88:ac:4a:c3:09:fb:
         38:92:22:f0:d9:6b:43:bc:53:84:1d:72:88:21:c3:f9:c2:57:
         6b:00:cf:1c:95:f2:fb:50:a2:41:01:60:fe:08:2e:26:4b:37:
         5d:9b:d1:d8:63:e8:b1:ae:33:4b:d3:bc:f3:d0:a4:44:21:4a:
         9e:33:6e:3c:2b:c8:99:13:6b:e8:10:a2:88:e4:63:bd:11:40:
         a4:0a:d2:18:57:41:3f:42:f2:96:5d:43:07:64:3d:7f:36:51:
         ee:64:35:b0:72:4b:90:16:e1:2f:3f:45:44:4b:84:37:ff:bc:
         6d:bd:ae:77:76:5e:63:8d:79:e2:52:1b:f5:9f:68:3e:68:44:
         f5:87:13:fb:cf:7c:cc:32:52:36:61:63:82:fc:5b:88:57:2b:
         6a:82:05:4b:6c:36:74:94:e3:2d:23:d7:b5:83:ae:9f:28:9d:
         c2:79:10:05:6e:c2:3e:b3:2e:8b:b7:90:a7:58:41:61:e5:0e:
         7d:c6:19:50:57:67:66:c1:da:f3:82:f9:f0:1e:80:2f:85:06:
         e1:7f:e6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:50:53 2025 by rpki-client