Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
File:                     5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa (raw, json)
Hash identifier:          gv2BKrg7M7lj22CwcwC/IJQ/JkcOIEkhuZqKah9rBSk=
Subject key identifier:   44:3E:B0:79:8B:D4:E4:55:16:94:C4:D6:EA:2C:BE:B9:61:C0:3B:8D
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F43285849A1EF74639ECE9B8512FCD300
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     683
IP address blocks:        2602:278::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:74:63:9e:ce:9b:85:12:fc:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=cfa586aa-8ee5-4fcd-91c0-abec90d54d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:eb:55:e0:5c:0d:53:d6:92:6d:8d:9d:88:7e:
                    1e:2d:5a:a3:e0:e2:1b:2e:04:d6:e2:1f:e1:bf:92:
                    b1:1f:c5:a4:80:9a:4e:1b:c5:83:4f:c5:db:e3:63:
                    76:e4:92:67:84:47:87:ce:bf:ec:a5:43:d3:71:40:
                    5e:07:99:4d:00:a3:6d:93:ed:c2:a5:fe:98:fb:4c:
                    27:97:5b:ad:89:f6:e1:e5:5b:be:92:1f:05:38:37:
                    6f:09:fc:72:c7:1c:e5:00:ae:c3:08:7a:ba:48:6e:
                    c0:22:9f:e8:44:9c:ce:16:d3:f7:9b:17:a2:b2:22:
                    34:9c:4e:a0:e4:96:34:a7:04:0b:d2:4f:8e:d6:f0:
                    c8:5f:d4:00:79:13:35:c0:32:e0:58:64:e5:cf:de:
                    9f:1b:55:4d:7f:9b:88:f0:a6:50:37:ab:51:b5:41:
                    be:44:51:48:91:d2:30:15:44:47:c1:1d:1d:69:25:
                    58:c4:04:7f:2a:6e:98:1c:b2:f5:52:f4:ec:3c:80:
                    05:8d:42:0a:1e:3b:b1:3c:32:ea:8c:82:d6:7c:84:
                    f0:c7:0d:aa:a7:bc:12:02:e1:2a:a0:65:41:31:ca:
                    50:0c:2c:a1:d9:6a:80:a8:c2:d4:f0:9b:0a:b5:78:
                    48:9d:3a:c1:2d:ad:08:cf:e2:7e:21:09:d5:d5:1d:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3E:B0:79:8B:D4:E4:55:16:94:C4:D6:EA:2C:BE:B9:61:C0:3B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:dd:3f:07:b1:a1:ab:a8:85:55:93:41:8b:b3:3f:67:9b:44:
         59:e6:3c:2e:43:8d:98:87:42:ed:8a:a8:72:c5:bf:eb:86:f8:
         9e:eb:87:4c:69:75:ed:81:5e:19:fa:88:56:d0:7c:a5:f8:e9:
         e4:ea:69:b6:4d:9b:84:35:72:6c:38:d2:e3:46:30:e5:80:a1:
         02:ad:2d:64:30:3c:ac:4f:db:6b:d3:21:46:76:7d:33:bc:18:
         77:7e:f0:c1:61:b4:77:99:91:2c:17:ca:09:7b:a6:39:98:f2:
         6f:b3:f8:2c:0e:60:71:69:86:da:a0:f0:ee:da:4d:47:d9:95:
         1e:49:4a:6f:16:51:69:86:90:fa:ab:5d:e8:51:22:2b:b7:4c:
         71:a7:8c:88:65:d3:4d:90:33:d2:17:9d:ed:92:44:19:81:59:
         89:a4:9d:e0:99:d8:c8:6a:41:b7:5b:96:b1:b0:6e:ae:c8:08:
         22:eb:a3:93:ba:00:27:3b:31:8e:bc:7c:5e:58:83:6a:4f:07:
         b6:40:de:b4:d6:13:cf:74:b5:0c:c7:fb:ff:0f:7b:6f:4f:cc:
         52:4f:c9:b8:21:54:76:24:af:80:2d:cc:98:1e:f9:e6:a1:94:
         c9:ab:bf:17:2b:76:d9:da:ea:00:96:2b:98:7d:7a:71:b2:18:
         e4:05:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:51:16 2025 by rpki-client