Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/b21c247b-f3dd-32d8-b20c-6e8e3e20ad45.roa
File:                     b21c247b-f3dd-32d8-b20c-6e8e3e20ad45.roa (raw, json)
Hash identifier:          injz7t7XfVH/1KUE0Gg9z7Gzq2pR7YXgIYLXGg4Nrn8=
Subject key identifier:   24:2F:B7:59:4A:38:DD:6E:E1:57:0C:A4:15:96:2A:DF:92:62:70:AB
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584ABA80C5E703B28E27408DBB80
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/b21c247b-f3dd-32d8-b20c-6e8e3e20ad45.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     152918
IP address blocks:        2602:f96c:df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c5:e7:03:b2:8e:27:40:8d:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=0f840ff5-6838-4d3a-bc82-aaba314f5747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:10:1c:e4:b7:92:a2:46:da:01:c5:6b:e5:
                    fd:c1:52:1a:46:6a:ee:3c:56:89:73:c9:4a:9b:84:
                    58:ee:43:7a:46:07:f1:2c:3e:83:d6:22:1e:30:3a:
                    c3:d1:a1:f5:c1:b2:93:ec:da:f2:89:c2:3b:f9:ad:
                    db:27:97:db:60:5c:07:6f:09:75:bc:cb:14:93:fc:
                    14:af:d0:3c:a0:5d:a8:d3:4b:4b:23:4b:f6:ee:6d:
                    5e:1f:ff:dd:55:2b:00:8f:85:e7:86:f0:87:ab:c9:
                    0c:c8:ab:eb:57:bc:70:f6:a2:40:e8:03:78:a2:41:
                    3b:2c:6d:4d:82:08:dd:45:65:c9:af:98:59:dd:b3:
                    f6:10:a5:cb:c1:cf:8b:80:f4:77:4a:cd:24:8c:87:
                    f1:73:cb:04:54:48:7a:f8:4a:20:91:97:3f:3d:26:
                    ec:d9:cd:c1:65:63:b6:b2:56:65:de:e1:17:b6:f3:
                    9e:03:02:a5:71:36:1c:46:8e:fe:88:42:7f:e4:72:
                    40:07:0f:07:2e:25:cb:00:1e:60:50:89:c3:3d:14:
                    56:a8:f7:40:c4:64:b5:2e:58:17:67:06:c6:56:6d:
                    46:b5:d8:2a:b5:c4:be:06:29:0d:c0:b4:ef:d9:6f:
                    ab:74:e8:67:bf:02:9f:7f:65:a3:46:e3:93:ef:f4:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2F:B7:59:4A:38:DD:6E:E1:57:0C:A4:15:96:2A:DF:92:62:70:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/b21c247b-f3dd-32d8-b20c-6e8e3e20ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:93:7e:37:04:ee:3f:cc:86:bf:da:cd:de:4b:76:1c:9f:19:
         ef:5a:7b:06:9d:7e:4f:56:e9:6f:82:48:b6:bd:36:8e:8a:e1:
         20:7a:64:d6:38:a9:0e:1a:ca:8d:a1:ec:ca:b7:bf:50:94:fa:
         29:5a:d4:bd:8b:17:11:ac:d4:61:22:4b:9f:75:5a:38:b8:95:
         9d:17:04:10:7e:10:b1:17:25:df:e1:05:2c:4c:ef:70:a3:05:
         a4:90:67:af:a0:8f:26:14:a8:45:de:56:f9:ba:a4:21:1f:da:
         4e:09:de:15:60:ee:89:ae:94:4e:2b:d6:95:e3:ec:1b:55:d5:
         29:61:96:9a:94:0f:ee:eb:25:bb:bc:6c:4b:07:47:5a:ca:53:
         d9:e3:83:ed:3a:2c:fd:20:8f:ec:5e:60:54:f5:a9:bc:e3:31:
         46:b6:68:a3:fd:09:ba:1c:95:6c:f0:cc:e6:ac:42:c1:2e:3c:
         81:2a:70:c4:91:ca:fb:ce:ac:7e:2a:29:d8:31:fc:66:dd:fc:
         17:4a:44:db:bb:7a:02:a3:3c:4c:e3:80:88:a9:e4:9d:ba:1d:
         dd:1f:3e:99:9c:10:6f:d4:fe:38:74:8c:85:58:c9:12:f9:e0:
         d0:c8:0e:e5:5a:b9:08:42:55:f5:52:f1:76:19:02:6d:30:60:
         81:cc:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:25 2025 by rpki-client