Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa
File:                     6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa (raw, json)
Hash identifier:          iiXCMYwt7pnju9shVCZoH5Sp090hk1r8Kp0yGLdCKxE=
Subject key identifier:   99:A6:F3:EB:FC:E9:35:DF:A3:7E:E0:0E:EC:7F:9E:A3:F6:C1:15:15
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849F9DFE05630D366F792176B2C
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     3423
IP address blocks:        2602:fbdc:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:e0:56:30:d3:66:f7:92:17:6b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5ceae6e6-28a3-41c8-9ec7-a5f4f40f39e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:4c:ec:af:ff:65:55:52:1f:a2:02:c6:79:
                    17:f5:1c:c4:77:c6:62:b1:53:98:77:54:27:db:f0:
                    26:0d:a3:b0:ff:95:90:65:29:98:53:17:2e:14:2e:
                    bf:87:98:e7:72:2e:6b:7e:db:e0:0e:1a:0f:b3:96:
                    8d:6d:00:d1:60:cd:33:31:55:9c:79:77:de:be:01:
                    fb:d4:aa:f2:f2:7f:50:a5:2f:f2:aa:ac:9d:da:8b:
                    47:8d:46:1e:97:44:26:3b:ad:d3:31:81:c4:81:11:
                    8c:25:3d:d4:a6:dd:2c:e4:d2:fb:34:18:87:6c:e4:
                    78:2e:3d:32:94:b0:a3:f8:72:d2:5f:70:fc:af:e4:
                    b4:63:90:73:81:b4:20:db:7f:13:ab:13:35:c3:c1:
                    2f:bb:f5:3b:18:6d:3b:2f:32:a2:9e:dc:59:7b:b5:
                    7c:84:4a:25:a7:5c:aa:5e:a3:7b:4d:e6:14:8a:91:
                    81:9a:a7:86:b2:cd:bc:b7:bb:8a:c1:87:96:8d:fc:
                    c5:a6:bf:26:ca:60:dd:9b:1a:40:b6:3d:62:aa:33:
                    0d:33:d8:4b:9e:40:10:8d:86:61:b8:4e:52:a9:85:
                    e0:55:70:3b:02:8e:d7:8f:cf:8d:bc:84:85:88:2a:
                    41:92:d5:2b:15:87:e5:fe:d6:9c:2f:c5:d2:07:d3:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:F3:EB:FC:E9:35:DF:A3:7E:E0:0E:EC:7F:9E:A3:F6:C1:15:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a3:94:94:6d:a2:b7:41:5e:b3:40:15:86:ca:31:ad:72:5c:
         e0:6a:b1:0e:ff:fe:5c:8d:ed:6d:dd:d1:e8:ed:d7:25:8b:b2:
         03:c4:8a:a7:1a:24:62:67:cc:d3:46:86:08:aa:7c:6f:a3:d5:
         81:2b:63:44:45:e5:0c:82:ab:79:fc:64:6a:13:7b:5b:34:af:
         5a:c6:85:46:bd:b3:7b:14:92:43:e4:e5:f6:63:34:5a:c1:45:
         98:40:cd:90:31:0f:d1:fd:fc:af:18:45:59:bd:ba:e3:86:bb:
         53:d4:1c:61:b1:f1:e2:f0:5a:fa:61:57:e3:55:a9:6f:84:d6:
         c2:15:8c:f3:29:06:05:5f:10:f1:11:1e:73:c4:cc:85:93:dc:
         12:16:62:e6:31:2b:c4:32:5b:92:b8:b2:2a:fe:02:f4:0d:ec:
         d2:4b:b3:31:cc:ed:2b:f6:47:b4:a6:3a:37:bc:5b:9b:55:01:
         5d:5b:a8:24:03:a6:e4:66:0c:61:af:5a:1a:ab:8a:9e:59:75:
         b0:72:58:14:c1:3d:eb:62:4e:5b:a1:2d:2f:86:71:19:47:e0:
         31:e9:52:07:cc:15:2f:e7:e5:fd:03:64:1f:a4:47:76:58:7c:
         f6:72:c0:e1:06:6e:7d:77:95:60:0c:e8:c7:bb:c3:62:92:54:
         00:7d:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:42:46 2025 by rpki-client