Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e74044e5-a7c4-31bd-89d5-50e5e51206ba.roa
File:                     e74044e5-a7c4-31bd-89d5-50e5e51206ba.roa (raw, json)
Hash identifier:          zvh/GLCKNN3LYgpiD1eR8FsCgC0CkpNk1+1gsmko/2E=
Subject key identifier:   DE:F6:1D:AF:A8:40:E1:0E:20:D3:78:9E:77:CD:40:0C:0D:1F:B6:FF
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584A78E60A724C792FE8CB100D70
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e74044e5-a7c4-31bd-89d5-50e5e51206ba.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     21903
IP address blocks:        2602:fa6d:941::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:0a:72:4c:79:2f:e8:cb:10:0d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=07ce15d2-89eb-48a0-a7e7-5f1ef6835edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:43:72:83:8a:10:90:65:32:29:e5:f9:89:
                    c7:cc:aa:ec:3e:b7:9d:0c:cc:38:6d:55:14:f8:92:
                    2b:5e:4b:43:c8:e7:19:61:ee:ec:13:ba:6c:ea:9a:
                    6b:cf:42:b8:e1:50:8d:f4:a1:fd:47:30:30:95:e2:
                    84:4c:c7:ec:f4:65:36:ba:ad:1b:9b:69:7b:74:e4:
                    96:21:41:3d:47:c1:1c:b4:ed:07:03:17:89:d5:ca:
                    45:6f:e6:a9:4e:04:d6:54:6b:1c:55:06:3f:b8:dc:
                    0c:7b:24:7c:ad:4c:8e:64:2d:c2:e5:9e:1a:76:aa:
                    ea:ae:9c:d7:a9:6f:20:9c:17:29:be:fc:75:c7:bf:
                    b2:72:8f:e8:08:6b:d6:ea:f5:73:7c:1a:0f:01:f2:
                    97:81:94:50:02:f6:e1:12:ad:aa:09:ba:80:2c:28:
                    08:60:22:a9:5b:75:06:31:63:b2:a7:91:a5:d2:ec:
                    10:7b:1e:9a:df:7e:57:5f:37:0d:a2:ea:1e:0c:f9:
                    f9:17:24:ae:fd:e6:f6:cd:18:8a:a6:06:2e:88:55:
                    44:3f:9a:51:87:69:4e:56:aa:b0:e4:c4:33:1d:e5:
                    86:4f:e0:0f:7b:4a:71:25:7a:23:2f:ef:66:57:6f:
                    7e:15:d6:85:8f:f0:f3:19:6c:d2:f5:29:96:af:a1:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F6:1D:AF:A8:40:E1:0E:20:D3:78:9E:77:CD:40:0C:0D:1F:B6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e74044e5-a7c4-31bd-89d5-50e5e51206ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:941::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:53:d0:04:3b:dc:8e:d7:46:81:b9:c1:cd:0e:ee:7d:99:40:
         ec:db:e7:ac:04:40:4c:aa:61:35:ff:9d:56:02:76:ac:e3:1d:
         08:9f:75:7e:4e:09:09:e6:f6:29:06:ce:c1:a1:fe:b6:30:18:
         a4:87:3e:cc:82:33:e8:cd:5c:ba:34:3b:d9:ce:af:0b:f4:d6:
         a7:52:01:2b:4c:2a:dc:29:f0:d3:47:b3:6b:e1:28:9e:46:89:
         09:b6:26:0a:d9:1d:1a:d5:2f:bc:d3:0b:20:d9:12:2c:c6:de:
         05:da:de:a9:02:45:4d:3c:58:9b:fa:82:8d:d2:ff:54:99:9f:
         9a:d2:4a:ad:0f:51:67:11:38:4b:d6:e4:5a:3a:be:99:45:73:
         d3:22:1d:f2:ac:16:4a:b9:0b:39:db:20:ff:72:13:c2:e4:77:
         ae:03:05:be:f6:3f:22:d3:92:ae:c9:22:22:b6:36:3d:a4:e3:
         31:31:f4:53:44:ad:84:08:7c:06:d2:25:94:ed:4b:22:bf:e3:
         a4:de:07:ba:fb:bf:a4:54:af:c4:b9:22:1c:46:73:60:86:8f:
         d7:44:85:39:f9:80:00:ec:2a:b7:05:53:e5:5f:ff:7f:05:f5:
         a6:30:e1:45:87:9b:16:43:48:79:67:c7:7c:e6:29:12:14:91:
         8b:d6:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:54:41 2025 by rpki-client