Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
File:                     c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa (raw, json)
Hash identifier:          5l3IQUqeV9/vwdFZfd6YHubbYsQFN2u2VFle8tKgY6Y=
Subject key identifier:   DA:AB:56:2F:13:11:3B:41:9C:52:08:4B:A3:35:67:0D:FD:94:1F:B7
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285849955F21607C219352077A1600
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     36519
IP address blocks:        2602:80a:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:21:60:7c:21:93:52:07:7a:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=f0591b2e-7bd4-4a46-8846-723284ea3753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:ff:ed:a3:40:05:38:4c:67:8b:be:7d:b8:
                    f3:47:77:d5:ae:6b:07:30:3f:14:b0:dd:e4:70:ca:
                    55:50:cb:d8:6c:a7:85:e3:d1:75:8b:f6:7f:83:12:
                    5b:c9:b4:d9:84:41:59:37:06:28:32:7a:d6:a2:55:
                    29:51:5b:75:3b:44:0c:20:f4:ae:ed:b5:76:c9:e9:
                    93:53:d5:cb:9d:56:1c:e3:4a:b2:02:ff:10:3b:dc:
                    94:af:bc:aa:98:e4:15:8f:ec:1c:e6:50:61:5c:25:
                    5b:0d:32:61:5b:63:9a:77:bf:9a:00:fe:07:0c:11:
                    12:6e:19:21:67:39:dd:e1:09:89:b8:8b:8e:c3:e4:
                    11:bb:9e:23:89:8f:92:c3:cc:ca:22:2b:ec:28:37:
                    81:98:1c:3b:82:47:59:ca:9b:02:5e:18:e0:e4:fd:
                    37:3f:ff:f4:07:37:35:fd:71:8c:e4:4c:a5:c6:1a:
                    4a:29:41:32:22:54:d8:b0:e0:e5:21:8e:d0:70:a3:
                    7d:45:0e:40:88:e7:3e:44:a2:54:03:b6:0b:6b:d5:
                    a0:09:cf:72:07:9b:67:b2:4a:f6:30:c0:76:e0:4c:
                    b2:b4:e0:8b:13:aa:7b:10:44:6e:f1:c7:29:6c:21:
                    74:2e:ee:d3:17:22:42:86:4f:f3:e7:b1:09:84:78:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AB:56:2F:13:11:3B:41:9C:52:08:4B:A3:35:67:0D:FD:94:1F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c82935b6-5d3e-3d5a-a1ce-a539010c0f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:0d:fa:08:b1:d1:e9:70:7e:4a:8a:50:65:d5:d8:aa:86:
         4e:95:c9:97:4a:d4:1f:dd:e2:50:53:e8:2c:46:84:b1:bf:3a:
         f1:4b:99:6a:39:e4:c8:e6:52:15:bb:24:e9:7e:2a:5d:70:42:
         c6:30:90:30:a0:2a:ee:39:09:d2:03:59:5d:30:02:98:71:1d:
         23:2b:28:bd:e5:07:7f:66:e9:a3:d3:30:7a:e8:d6:25:80:09:
         98:92:15:8d:f6:dd:55:53:0f:00:c3:41:c7:ae:24:5e:31:5f:
         21:aa:db:fc:dd:22:92:09:6e:23:b0:1c:8e:49:b0:01:a6:62:
         97:e0:53:2d:a0:8b:73:c2:0e:4d:91:40:78:51:ce:fa:33:ff:
         4b:02:c9:24:57:34:bc:06:7b:5b:de:df:71:c8:ec:25:0f:0b:
         76:34:b3:33:d9:8f:79:91:f3:63:15:1c:94:b6:aa:17:81:94:
         b7:5f:aa:b2:dd:42:f4:be:24:9d:cc:1b:e3:99:12:3f:2c:9b:
         ac:f4:c1:93:b1:9e:1e:f6:cc:3f:b1:97:88:8f:a6:0f:ec:5a:
         22:3f:6f:47:56:ea:f1:e9:ed:32:e4:45:72:e8:74:ec:15:0e:
         ac:71:4b:88:6b:91:94:9f:37:d6:92:f1:50:b0:5a:e3:2b:d8:
         4f:bd:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:23 2025 by rpki-client