Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
File:                     aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (raw, json)
Hash identifier:          U0+hVDbgemtkGiu3nQAGrlT468OSoVrxakC9zzD7VIM=
Subject key identifier:   99:B1:45:52:93:72:8F:EC:A3:D0:AA:E5:E7:8C:BE:83:C5:3E:4D:14
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F43285849D85F972FD2758946651A0A00
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     30690
IP address blocks:        2602:f99b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:97:2f:d2:75:89:46:65:1a:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=df10316a-7da4-4993-ba0b-1134f48ec9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:da:25:38:cd:72:de:dd:f2:37:02:f2:4c:
                    3e:e1:fc:77:4e:ca:11:89:52:50:9b:64:67:e0:be:
                    ef:8e:79:91:47:21:48:10:e6:dd:af:28:0f:e4:eb:
                    02:2a:3e:54:c0:29:c8:f5:bf:34:2e:38:44:4c:85:
                    22:3d:a6:9e:b2:7f:af:6a:45:f1:96:71:a3:c9:6c:
                    66:86:b2:6f:c3:f6:a0:6c:93:aa:14:6c:8a:87:ac:
                    43:9b:0c:50:eb:12:bf:07:26:93:a3:53:c5:b6:6e:
                    41:36:ba:2e:c9:79:fc:4c:6c:ad:c1:f4:cf:2c:16:
                    f3:4f:eb:c6:a5:81:9b:1b:25:0d:f5:15:6c:03:3f:
                    95:29:7b:e6:4b:fe:05:14:ce:c6:29:f8:0d:c7:d7:
                    2a:57:16:ac:13:bb:8f:17:dc:bf:09:44:3b:55:47:
                    62:89:d5:68:8c:3b:c6:db:f4:69:27:ed:8f:1e:7f:
                    a1:74:11:ea:06:49:d2:bd:9f:01:56:3c:ce:b3:17:
                    d8:28:af:38:bd:ad:98:29:cf:d1:70:63:1e:88:e5:
                    c1:8d:f6:6d:ff:f8:fe:f7:e7:01:eb:1d:49:fd:7a:
                    89:f6:43:55:74:95:61:8d:41:5f:bb:56:7c:05:7f:
                    89:f2:89:ae:47:fc:93:09:00:16:5f:90:8c:0e:93:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B1:45:52:93:72:8F:EC:A3:D0:AA:E5:E7:8C:BE:83:C5:3E:4D:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:21:79:d0:07:37:ec:60:05:1e:8a:59:c0:2b:a5:98:f7:2f:
         a4:4a:53:ba:5e:12:42:c6:9d:76:7c:11:93:d1:31:b8:e0:55:
         79:08:a0:39:8e:af:94:7f:c5:c5:17:70:85:fb:fb:2a:6c:3e:
         8e:39:bd:9b:b4:c5:f0:c0:7f:7c:50:0d:87:07:12:8e:08:da:
         29:df:fe:99:b9:87:f4:c5:9a:ea:89:07:69:6d:78:18:d2:03:
         7b:06:39:be:59:5f:ec:d7:89:bb:4a:46:6a:ae:07:de:6f:d8:
         82:48:28:21:b0:a2:0d:0d:38:04:9f:52:7b:a0:f2:9b:4b:17:
         f5:60:61:ce:e6:67:9d:a5:9d:be:cf:06:1e:9b:94:b2:2d:8a:
         bb:6f:2f:8a:28:f8:66:55:72:be:c8:26:a0:78:ad:93:b9:67:
         01:65:cc:6b:1e:34:d7:c2:97:fd:9e:fc:e2:72:b7:44:1f:c8:
         9c:41:8a:51:74:38:f9:71:85:6d:38:7a:bb:58:59:56:58:25:
         54:db:bc:e0:71:2e:1d:8a:76:d9:d4:ec:fd:0f:93:66:5c:1a:
         bf:b6:bc:42:12:c0:e9:6e:66:3a:a2:85:84:60:43:75:0c:62:
         f8:d2:4b:1c:6d:60:2c:92:6d:b0:e8:98:7e:bf:e4:3c:e7:9d:
         9e:78:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:25 2025 by rpki-client