Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/fb71d9b5-186f-392d-b932-bd1d08f191c2.roa
File:                     fb71d9b5-186f-392d-b932-bd1d08f191c2.roa (raw, json)
Hash identifier:          81/oavC/WzkWh1OOjWDO2SQUfrZyZov8Q3kaRU3DcuE=
Subject key identifier:   EC:DB:34:0A:DF:05:8F:B5:B2:B4:60:B0:C6:C3:DD:2F:9B:1A:3A:91
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584A0C055E62254188B57D2D1280
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/fb71d9b5-186f-392d-b932-bd1d08f191c2.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     36516
IP address blocks:        2602:fa75::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5e:62:25:41:88:b5:7d:2d:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=24e4b739-952e-4473-b7c7-5e16502c8880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:e8:5a:87:e7:d6:c4:09:eb:36:26:35:18:
                    0d:d7:06:63:d7:61:54:75:6b:1b:ce:ac:2e:b1:fc:
                    ad:76:be:17:67:1e:8e:6d:40:31:c1:b1:61:b5:69:
                    30:77:d2:1f:99:ca:71:27:18:a7:b8:12:de:3b:8b:
                    29:40:32:35:86:ee:72:0b:38:d9:a8:31:8b:77:dc:
                    59:3e:5c:c1:b1:7c:24:47:69:cd:e7:af:b7:80:72:
                    f4:6f:91:1e:31:d9:5b:06:1b:36:5a:4f:32:aa:60:
                    d6:6d:b9:62:0c:f2:91:93:75:43:e9:e6:c8:c9:1b:
                    51:68:92:a5:80:4b:3f:a8:e3:4e:73:c1:86:e9:68:
                    64:2c:61:6a:3e:13:06:0d:34:92:11:1b:f2:f2:3a:
                    10:53:c4:40:ce:c6:23:0a:e8:e6:de:8e:f3:e0:ca:
                    08:b0:b7:a4:fc:f6:28:d6:35:8c:8c:f5:d1:f8:66:
                    17:77:91:fe:9b:04:bb:d9:16:39:00:68:d2:50:6e:
                    d2:48:85:79:72:df:67:7a:87:51:b1:c7:a3:b4:ce:
                    36:f1:e8:a0:c5:76:b5:78:9b:24:0c:54:e6:ab:ef:
                    fb:6a:ba:5b:b7:1c:a0:67:2d:47:de:fc:bd:40:29:
                    c7:2a:42:0f:16:79:bb:a5:91:06:93:34:99:b0:0f:
                    ce:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DB:34:0A:DF:05:8F:B5:B2:B4:60:B0:C6:C3:DD:2F:9B:1A:3A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/fb71d9b5-186f-392d-b932-bd1d08f191c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa75::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:33:0b:9e:2e:ae:00:d2:f5:bf:d7:d6:2c:ab:b4:5f:1c:a9:
         a3:0b:41:81:96:de:a0:8c:6d:b8:b7:ec:c0:6c:65:8b:14:54:
         97:b4:c2:c8:32:8d:80:93:94:51:6a:69:f1:d8:92:d3:73:20:
         3c:2e:89:1f:63:e3:dc:a0:a4:f8:13:ee:90:31:0c:cc:63:49:
         ae:90:bf:45:c8:d6:c0:7b:24:f1:56:b0:6e:37:b6:78:2a:56:
         fb:fb:17:51:b9:58:cd:09:6a:78:39:19:14:44:4e:7b:67:64:
         0b:2d:92:f7:77:8c:f8:72:a1:40:7f:ef:40:f0:71:99:d3:39:
         9f:19:5e:2f:e6:29:3b:3a:4e:10:42:bc:34:ad:4a:f6:82:95:
         1e:ff:77:ac:bd:ff:b2:2d:f2:21:a9:f9:11:11:37:2e:08:7b:
         d0:ec:09:cc:b9:ef:00:83:29:25:ac:c9:88:a2:a1:ac:6d:17:
         4d:3a:f7:28:58:30:8b:9a:b2:bd:ec:44:09:c3:91:bc:cd:05:
         7f:08:b9:ca:16:b6:d2:d6:17:cd:b6:b0:16:57:a3:7d:3b:72:
         87:1b:e1:d8:22:7b:4a:bd:01:e6:7d:de:f2:c6:cf:92:35:b8:
         03:fb:bc:47:75:00:d1:66:36:99:1b:43:c6:29:79:05:7a:23:
         5f:ce:ad:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:06:54 2025 by rpki-client