Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
File:                     d6d07e8f-2d94-3390-a310-5c649e309887.roa (raw, json)
Hash identifier:          uh5RrZpXaVZvLuIwZYb0HZPFCiVdQ3qBV5vMUkCgCjo=
Subject key identifier:   20:3E:C6:A8:C7:44:4D:24:65:88:18:FC:08:3F:A9:56:2E:9D:FB:C1
Certificate issuer:       /CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
Certificate serial:       010D0C9F43285849EA851AA327A8D1AB57AC7C20
Authority key identifier: BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     399568
IP address blocks:        2602:fc6f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1a:a3:27:a8:d1:ab:57:ac:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=767d425f-7d96-47d8-a1a1-0406d7acbfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:8a:af:b1:ba:e2:e1:25:c6:74:a7:15:da:
                    16:3b:6c:f6:e9:f5:84:d9:ae:20:3b:53:91:04:c0:
                    55:d9:a2:bc:57:9e:9b:a1:d2:71:5b:c2:60:a3:d2:
                    79:6f:81:2c:c3:b3:e5:aa:5c:65:fb:9f:59:12:39:
                    50:16:df:8e:08:8c:db:58:52:8e:3f:06:cd:01:87:
                    5a:4b:51:f9:2f:c6:21:7c:34:9d:28:10:46:01:b4:
                    0e:ef:d1:17:cc:49:71:83:73:98:a8:fd:bf:51:9f:
                    a2:f2:b0:b4:98:07:c1:0e:88:e2:a2:4b:6d:b0:24:
                    94:46:17:03:26:59:75:ce:24:66:14:6e:9c:1c:26:
                    a2:9e:ab:50:66:0d:0d:11:49:6f:94:a1:d9:c9:84:
                    56:42:ef:a9:32:aa:3c:a7:45:4b:88:84:67:ca:35:
                    7f:e4:04:88:f6:19:fe:48:42:f5:b2:9c:ce:99:38:
                    17:aa:d3:1c:17:7e:fe:e8:7e:82:c0:28:b3:ce:3c:
                    49:36:2e:f5:cd:99:bb:fd:72:36:51:ea:f6:ec:4e:
                    9c:ed:cd:32:76:56:50:e3:00:0d:34:cb:18:c1:90:
                    89:ca:d0:7c:06:90:bc:e0:b9:04:8b:94:58:aa:34:
                    2f:a1:f9:70:cb:da:01:ba:bf:e7:87:00:23:29:a4:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:C6:A8:C7:44:4D:24:65:88:18:FC:08:3F:A9:56:2E:9D:FB:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/d6d07e8f-2d94-3390-a310-5c649e309887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc6f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:04:eb:25:92:ee:f1:de:d6:c2:36:63:b9:bb:ed:76:76:4d:
         53:50:36:0d:e1:95:88:19:e4:e0:de:68:dd:15:9d:52:c0:2c:
         4f:48:15:70:41:91:6d:c1:ce:62:de:20:37:9b:dc:5d:19:5c:
         34:aa:b9:27:3d:4c:a1:32:02:d6:02:aa:ce:11:37:fe:f2:c4:
         5b:77:aa:e9:0e:5f:69:a1:ba:2f:eb:11:58:64:bc:6d:40:80:
         3d:63:fb:43:b2:f0:83:4b:65:2a:ef:47:9d:83:ab:e8:82:2c:
         36:99:2b:d1:ff:c7:ec:85:9c:58:cd:a7:0d:6c:2f:a1:63:d7:
         18:a9:78:54:89:f4:38:51:48:f4:a1:77:23:1c:89:43:30:88:
         12:93:a2:0f:c2:29:05:ff:c8:47:2c:29:3f:91:86:be:a5:f5:
         66:8f:3f:4e:a0:f3:d0:e2:57:16:00:ed:87:61:3b:70:54:f7:
         ac:ae:59:d8:7b:f5:a8:12:f2:35:17:f3:c8:d9:1f:bd:1b:35:
         be:62:9a:7e:4d:08:e5:f3:d2:3f:15:79:99:3a:16:98:7c:1c:
         a5:7a:84:fe:50:c1:65:db:6b:b3:e4:64:0b:fd:05:9f:71:d3:
         ab:c7:ad:b8:82:47:4f:f7:0b:2b:d7:b5:cc:f3:a7:ef:19:b9:
         31:9a:45:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:33:46 2025 by rpki-client