Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
File:                     25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json)
Hash identifier:          BkK5lTcs8mmEPsp0YriDG40X5o7sAQ8uVyiTlWp8Z7o=
Subject key identifier:   9B:89:00:43:43:23:6A:48:FC:A4:E6:5F:85:48:BE:13:75:D3:F1:FA
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F43285849DC8F9DCD67FC8FEE36A81540
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     64289
IP address blocks:        2602:2ea::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:9d:cd:67:fc:8f:ee:36:a8:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=89ef5f22-c65c-4354-bf24-b0e701ad3991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:6d:94:d2:f4:0c:61:a9:81:c5:27:2c:f7:
                    33:fd:37:63:27:27:a3:12:fd:e2:37:6d:91:95:68:
                    82:57:3f:1f:01:47:11:6d:67:31:32:6a:d5:a4:0c:
                    15:b8:7f:2c:22:6d:f7:a7:a8:fb:bd:b8:b3:eb:13:
                    b2:9e:84:35:ca:90:a7:b8:b0:8e:5b:a5:d2:8b:d0:
                    62:42:7c:63:5e:c6:27:9f:6f:7b:c2:82:95:7b:e5:
                    40:34:55:e4:35:19:9d:28:d8:06:76:af:7c:4c:f0:
                    e9:7c:5c:36:a3:0e:48:09:48:45:40:51:08:55:a5:
                    a4:3f:dd:ec:40:4e:a7:b0:5c:07:13:49:d7:80:40:
                    20:86:01:88:71:8b:de:d5:0f:0e:eb:2d:8c:96:13:
                    5c:51:66:cf:5e:ec:ef:a2:65:a3:54:97:69:36:54:
                    cb:3a:10:13:d5:ba:3c:6b:3d:42:dc:29:8c:6c:08:
                    0b:2d:61:ca:45:dd:8b:fd:7f:d8:88:a4:be:24:de:
                    dd:b4:6b:fd:aa:5a:e7:c1:6d:86:f5:c1:69:9f:22:
                    49:e5:90:ed:25:1d:9b:87:43:52:87:42:6c:4f:4a:
                    88:3a:21:63:58:b4:2f:38:62:c8:48:08:07:b8:26:
                    20:33:8b:fd:9d:5c:0d:73:b3:4b:49:30:95:cd:fb:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:00:43:43:23:6A:48:FC:A4:E6:5F:85:48:BE:13:75:D3:F1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ea::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:5f:d2:64:81:1d:e9:5d:bd:00:73:f8:a0:6d:3c:44:a8:
         cc:6b:4b:66:25:c8:1f:ae:6d:c1:1e:89:d1:94:82:34:ed:c3:
         3f:54:cf:96:f8:4d:1c:06:de:ef:5c:3c:62:e8:b4:39:2c:6d:
         1e:69:d5:ea:0c:fe:2e:f0:0b:ea:b0:da:b8:17:c2:87:47:21:
         39:e4:11:2e:cb:35:68:09:5f:05:e1:8e:bc:da:cf:68:ea:a4:
         0f:16:94:f3:fe:f7:97:1f:c4:51:93:74:72:bc:f8:e1:6c:a0:
         14:1b:2c:33:6a:c9:31:c7:f2:87:92:fe:ea:10:3c:d0:c2:d8:
         d5:9b:0f:cc:c2:3c:4a:ba:ca:9a:ca:5e:23:29:88:b0:36:bb:
         dc:91:21:e3:99:2b:0b:bd:8a:aa:fa:17:f9:42:41:ea:aa:ce:
         56:4f:52:fd:81:65:c9:d5:e7:f6:ae:ff:b2:e3:bc:a6:59:2d:
         4f:3e:8b:c8:d6:1d:ff:ed:d5:8f:e5:df:0a:b8:ec:9c:d4:0e:
         7e:b2:ae:c0:2e:8f:74:a7:36:f1:ed:87:07:26:b1:88:08:7c:
         20:64:09:66:23:51:12:d3:94:03:ab:06:ac:27:a8:95:24:88:
         c2:bd:c6:b5:ba:bc:f7:f3:4f:1f:33:0a:71:96:b8:62:b0:a2:
         5e:2c:fc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:31:57 2025 by rpki-client