Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa
File:                     711f4989-e100-395b-bab2-10d1aa959f39.roa (raw, json)
Hash identifier:          x06JXxxcobN6R9j0XiVEKeViNi7qHaxhuBVOg6wf8HE=
Subject key identifier:   11:16:D5:28:B8:F7:7B:D6:37:D8:A4:97:57:30:12:41:08:91:D1:5C
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584957F404314F652A9578A358C0
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     14490
IP address blocks:        2602:fa70::/44 maxlen: 48
                          2602:fa70:10::/44 maxlen: 48
                          2602:fa70:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:04:31:4f:65:2a:95:78:a3:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=bb703baf-113a-4d21-868e-cbd5b5085aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:8d:de:81:b2:2a:1b:a7:6a:a0:8e:2d:50:
                    ac:b2:00:b5:23:57:7b:05:95:54:a8:06:e6:2e:69:
                    9d:84:e2:a4:27:f4:1b:fe:e6:e1:08:96:e0:e0:fe:
                    0b:e8:f0:70:82:a4:76:4d:c1:47:64:75:2d:51:ef:
                    5a:77:f3:d3:76:13:6e:df:74:3c:64:fb:2c:ba:07:
                    43:cb:ad:5c:94:0e:f3:9a:86:b2:b5:a9:ee:e7:f7:
                    d4:68:df:20:a1:1c:59:e6:ad:ec:33:71:eb:1b:8e:
                    9c:5d:11:b6:c1:97:77:53:78:1b:04:2d:ae:3c:7d:
                    c3:98:d1:f5:3a:dd:fb:e6:d1:4f:ae:ff:62:aa:75:
                    e4:f8:4a:d8:f0:5a:c2:2a:5e:87:21:e8:28:b8:cd:
                    78:69:24:87:1b:9f:8c:d8:94:41:1b:42:f0:33:4c:
                    58:ec:da:0f:ab:83:26:9e:16:f4:79:03:04:e0:29:
                    89:d5:8c:13:d7:83:ce:e3:7a:b8:67:63:e4:97:8b:
                    39:5e:9c:db:b6:c4:0a:65:66:9b:be:f5:f4:82:7f:
                    88:a5:99:8e:c2:e8:22:c9:a0:aa:79:e7:43:eb:66:
                    1b:70:72:1e:19:57:07:b6:51:7f:15:f5:af:ef:91:
                    7a:a8:ca:3e:3c:32:5d:61:99:37:a3:b7:73:3a:b3:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:D5:28:B8:F7:7B:D6:37:D8:A4:97:57:30:12:41:08:91:D1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/711f4989-e100-395b-bab2-10d1aa959f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70::-2602:fa70:2f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:dd:c3:b1:2d:92:e4:6e:b9:2b:79:f6:ba:dd:7d:78:c5:4c:
         c0:c5:5c:60:60:34:da:30:53:a0:22:49:1c:c9:b0:e4:e1:c6:
         ca:52:8c:7e:3e:40:e6:88:73:64:60:d3:ed:c2:88:8a:c0:32:
         2a:8c:8f:65:a6:4f:59:fa:12:44:43:f7:fc:68:4c:7c:72:da:
         bb:18:7e:d3:c6:66:39:62:b1:9b:ed:32:fb:3c:e4:73:5a:75:
         57:4f:2f:39:00:60:21:07:72:e0:97:f5:47:73:f3:04:e6:e3:
         c5:ec:e4:24:6e:95:d6:ee:20:3c:5b:16:e8:17:47:3e:cd:ba:
         17:dd:0e:95:34:e2:3f:73:e9:ea:f6:ce:02:00:f1:bf:75:82:
         c1:b6:64:95:40:35:bc:5a:d5:c6:7c:fb:e7:17:20:5e:7c:84:
         17:66:4d:ed:86:26:c9:da:73:15:e0:b0:a5:00:7e:c8:26:b0:
         3d:91:cd:6c:03:4b:82:81:6f:08:3b:72:f0:2f:65:3b:e3:cc:
         73:37:8e:a7:77:c2:52:fe:96:c6:5a:09:09:01:d7:e1:7f:69:
         81:e8:c8:d5:56:43:fb:df:3a:5d:48:75:7d:d7:69:ff:79:b2:
         13:f9:21:db:14:a7:6d:00:d9:e8:52:6f:db:05:73:6b:3a:cc:
         ed:36:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:50:44 2025 by rpki-client