Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
File:                     94b3319a-658a-3317-bf87-91c877d6dd90.roa (raw, json)
Hash identifier:          t3WLG9ML7hg2UK6sYHOAbtcUUvVwKOcdXmMYCk0GGEc=
Subject key identifier:   1C:1A:36:6C:F7:ED:D2:F2:4E:1D:D4:29:EE:F5:16:0D:04:D0:67:1A
Certificate issuer:       /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
Certificate serial:       010D0C9F43285849F2E54BCC327E4BF1EE43B540
Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     396350
IP address blocks:        2602:f950::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:4b:cc:32:7e:4b:f1:ee:43:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=a6af84a0-c9cb-414c-8e23-c5b926be96da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:94:ad:b5:71:3c:6a:0f:b8:6d:c5:a9:f5:
                    29:bc:50:ae:66:a7:fa:7e:f6:19:1c:7d:80:8a:5e:
                    47:97:ac:dc:41:2f:95:3a:a3:eb:2d:c7:4b:24:69:
                    3b:66:82:06:46:d9:ef:88:56:97:4b:3e:1e:21:34:
                    cd:8f:38:d2:b3:e6:e8:77:1f:e6:69:21:55:b3:90:
                    06:6f:47:61:87:5d:4c:09:5a:ac:74:68:95:ec:30:
                    e9:03:4a:13:81:5b:48:19:e9:c7:84:94:67:58:61:
                    de:0b:46:e6:4a:65:bc:e6:e2:27:3d:01:38:90:73:
                    2c:39:41:63:81:98:93:36:f1:08:ee:96:30:3e:0d:
                    ed:c0:06:7a:bb:98:f5:0b:1b:c1:94:14:46:00:6c:
                    79:47:cc:ee:b6:8f:cd:d9:65:46:1c:62:67:21:52:
                    f9:4c:60:3d:ec:ec:29:30:b3:6d:60:23:75:f5:47:
                    9e:c9:07:63:e5:6e:45:91:c7:3b:ef:35:39:1c:70:
                    56:73:81:c6:03:7f:20:24:00:05:99:d0:2a:ea:77:
                    17:a0:31:0e:b3:35:e3:59:94:06:6b:4f:6d:a0:62:
                    8c:cd:3e:3f:a2:e4:99:bf:55:a1:0e:85:0e:c8:37:
                    de:44:7e:eb:1e:f0:04:f7:b7:ca:eb:7e:0e:3a:b5:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:36:6C:F7:ED:D2:F2:4E:1D:D4:29:EE:F5:16:0D:04:D0:67:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl

            X509v3 Authority Key Identifier:
                keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f950::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:60:bc:77:44:70:d1:e9:c8:38:47:6d:89:9f:6f:17:f1:5e:
         a5:53:56:da:ce:43:79:c5:28:cd:ea:7c:2c:c0:57:9c:1c:09:
         18:df:3a:cd:71:3b:5f:f0:83:8e:85:69:b9:f5:52:10:a0:d3:
         8b:00:0e:c5:02:fc:95:df:b5:e6:87:3b:17:85:ab:b6:09:b4:
         05:2d:e5:e2:df:26:62:fa:a4:e2:48:4c:7a:79:78:7e:6f:f8:
         36:33:91:42:8c:64:03:1e:6f:ec:3f:a2:67:c1:b4:ac:5a:c5:
         ec:08:bf:65:23:b9:6c:7b:89:99:c8:c6:47:8b:d1:94:71:d2:
         10:8e:d6:f3:81:3e:eb:92:b2:df:7d:69:84:9e:d3:74:a8:0d:
         52:35:37:9c:37:e1:10:54:3f:4c:61:83:78:46:3f:3b:82:4d:
         13:fa:67:0b:e1:3d:d4:ae:e4:ae:48:87:11:64:b4:0f:f5:2b:
         a5:c8:2e:c7:4f:ad:36:e6:b1:0b:c7:fe:67:bf:57:a0:2f:c2:
         39:a4:16:b8:53:41:c3:ac:03:70:31:22:6b:de:e3:f2:33:3e:
         b5:e1:48:33:17:58:e2:ab:72:ec:5c:e7:42:c0:3e:93:11:76:
         b5:68:95:ec:7c:3b:1d:dd:b1:a9:a7:b0:36:92:11:c8:cd:4a:
         bf:28:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:16:03 2025 by rpki-client