Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
File:                     b155efeb-d3dc-31be-bdce-c8768e417775.roa (raw, json)
Hash identifier:          9xG5hrJ/L9EAXXrVCFfmVW84IGUM78JbqVDlrzOVgXM=
Subject key identifier:   1B:52:77:DF:B5:D1:67:7B:93:E4:E2:15:D4:1A:9D:F0:A2:4C:61:09
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584A17300A36CFF63E69D4DFA180
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     401100
IP address blocks:        2602:f972:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0a:36:cf:f6:3e:69:d4:df:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=df16b1cd-afb5-4cfe-96bb-1613cfe8b984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:5d:28:65:ba:8b:da:c1:40:41:3b:15:29:
                    11:a5:1e:90:ce:51:93:21:01:da:af:61:97:18:72:
                    60:fe:44:3b:6d:f6:0a:24:7c:4c:54:ac:29:81:84:
                    26:42:f5:ad:2d:28:e3:cd:96:b8:ac:30:db:d4:66:
                    c2:5c:d9:a2:4d:60:63:94:4f:8b:ba:c0:6b:9f:93:
                    4d:57:a4:99:dc:2b:b4:f1:91:99:28:c7:76:e1:49:
                    96:eb:88:cc:2e:9e:96:92:b6:2a:4e:1d:be:4b:d3:
                    c5:00:82:dc:b6:34:e2:2a:83:84:fc:db:a4:42:dd:
                    92:27:c3:6d:8c:f6:74:0a:f8:5b:3c:5e:0a:0c:b4:
                    ac:1d:10:d6:57:26:9e:9a:16:c9:07:d8:48:6a:d9:
                    3f:11:6f:38:b0:91:e2:1c:19:45:81:26:e4:dd:1d:
                    a3:cc:a4:5e:aa:be:27:00:a9:ae:43:2d:bd:2a:ef:
                    0a:8c:4f:02:83:74:8f:a1:a4:5f:d8:21:0f:d7:34:
                    3b:3e:b4:99:2b:89:83:95:30:67:9b:06:d0:14:80:
                    96:5a:f1:82:44:09:78:4d:38:4d:f6:ea:41:e9:96:
                    37:2c:34:96:ba:de:68:40:d3:53:32:c3:bd:49:c4:
                    7b:99:cb:29:39:8f:3b:8f:85:55:f0:8c:60:77:74:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:77:DF:B5:D1:67:7B:93:E4:E2:15:D4:1A:9D:F0:A2:4C:61:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/b155efeb-d3dc-31be-bdce-c8768e417775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:05:3d:f2:df:12:a1:3c:c8:39:a4:de:0a:ae:d8:2a:0f:76:
         d1:59:90:f4:54:a9:68:f7:df:4e:9d:0c:fd:70:e4:06:80:a3:
         f8:dc:de:3c:3e:6a:52:e1:54:f0:07:be:9c:a4:75:1c:53:e7:
         28:63:1f:a1:36:05:94:58:5e:07:44:ae:29:54:5a:5e:e5:6f:
         07:b4:89:90:57:af:cd:11:be:3a:0d:94:c3:28:81:bd:c7:6e:
         d4:a5:43:cf:0c:0f:67:cf:4f:ec:f5:73:55:1b:ce:60:85:8b:
         5f:06:a1:bc:69:bf:7f:25:92:80:ee:b2:2d:c0:85:b4:55:55:
         a5:21:f3:ac:dc:d9:c6:18:bd:76:57:08:1f:19:a8:be:71:79:
         c0:e7:79:4a:de:9a:65:54:cc:19:77:27:6d:29:77:3a:4a:e0:
         11:bb:4f:e8:79:85:51:28:04:ff:a1:f7:67:cd:59:16:7f:b6:
         0c:9f:24:d9:dc:d0:ec:5b:07:da:3d:f6:40:93:b1:c3:e3:82:
         af:23:08:bb:58:97:b4:33:4b:b1:e7:b0:af:2b:92:c5:4b:57:
         a7:41:4a:0c:dc:27:28:fe:0a:04:03:7e:5e:b1:ab:0d:d0:50:
         45:71:8c:2c:85:54:63:08:89:07:9e:c3:71:20:c0:b5:e4:a6:
         d1:f0:38:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:19:37 2025 by rpki-client