Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa
File:                     5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa (raw, json)
Hash identifier:          UzPtHJmd5GnUj/3h6zOwVbOToHRDBH0fWddjH5zxtPQ=
Subject key identifier:   BE:B8:62:94:8F:04:E5:AA:A2:FB:88:88:DD:AF:6E:37:9D:37:13:83
Certificate issuer:       /CN=1073152b-033a-4ad5-ba98-45c1d65704d4
Certificate serial:       010D0C9F4328584A258BCF6B2B77FA612550A158
Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa
Signing time:             Tue 10 Jun 2025 16:27:22 +0000
ROA not before:           Tue 10 Jun 2025 16:27:22 +0000
ROA not after:            Mon 08 Sep 2025 16:27:22 +0000
asID:                     215239
IP address blocks:        2602:f7ee:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:8b:cf:6b:2b:77:fa:61:25:50:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Validity
            Not Before: Jun 10 16:27:22 2025 GMT
            Not After : Sep  8 16:27:22 2025 GMT
        Subject: CN=71dc8ebb-b663-410e-bf5c-9fb776ad819a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:49:64:90:40:29:8b:f6:43:f6:33:b6:02:
                    ee:f1:76:2e:a7:9b:93:9f:79:b0:18:42:8f:9a:cb:
                    a1:15:22:b7:01:c7:5a:16:2f:8c:c5:f8:f8:8b:62:
                    5e:fd:3d:b1:4a:9c:92:00:4f:54:cb:18:f6:f0:54:
                    0c:01:2f:8a:3d:be:56:a9:ce:3d:d2:60:e2:15:15:
                    07:f0:21:ea:b7:27:d5:03:92:83:a6:24:d8:be:ce:
                    8e:a7:36:74:5d:bc:4e:ad:0d:e6:6e:fa:8c:46:96:
                    36:d8:88:af:3a:20:c8:64:ac:d1:e6:c5:1e:4c:a5:
                    af:d4:87:8b:27:51:63:ea:70:ef:75:9b:40:0b:8b:
                    8c:89:f1:f9:4c:e2:e5:0a:78:21:d2:e8:ed:cf:fc:
                    20:41:bc:57:13:8a:fc:7d:89:50:74:94:9f:31:a2:
                    3c:ab:61:bb:e5:e0:6f:e4:78:92:c3:09:33:2f:70:
                    3d:f2:da:5c:c9:2d:78:cc:4b:2a:f3:bd:97:b9:bc:
                    54:f4:a3:1f:45:22:64:a6:f7:1e:61:75:24:3d:ce:
                    e7:44:c5:23:f0:91:68:5a:33:d1:06:6e:d0:14:0e:
                    77:d6:a9:7e:b9:f3:55:d4:dc:ac:fe:46:12:4b:39:
                    e9:84:bb:e5:4e:f6:1f:23:a4:9e:3d:85:71:bc:0e:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:62:94:8F:04:E5:AA:A2:FB:88:88:DD:AF:6E:37:9D:37:13:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl

            X509v3 Authority Key Identifier:
                keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ee:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:56:ee:29:a1:6d:4b:b9:0d:ff:0a:c6:f2:dc:0d:bf:24:
         42:d5:d3:64:92:b0:1c:6f:c6:85:dd:e1:0a:45:a7:4c:8e:dd:
         70:22:49:c0:fe:6b:6e:50:f9:2a:a5:b2:c2:c1:9b:66:21:7e:
         9e:5c:2c:da:71:80:53:05:01:f4:7d:41:36:94:6b:f7:16:1f:
         77:9d:2d:0c:fb:f4:e5:cc:e0:af:0b:f6:d5:46:13:13:72:83:
         13:c7:08:8f:92:0a:88:ed:9f:db:85:57:62:bb:4e:ee:17:72:
         27:c4:c5:e9:87:c3:d0:54:5d:90:b4:25:a7:b9:50:dc:ae:18:
         c3:b3:9f:dd:57:57:a3:fe:3f:44:33:f7:12:75:fa:bf:61:05:
         29:21:fb:f4:ed:8e:5f:ee:83:8a:de:74:24:48:18:b3:08:59:
         1f:0c:fe:02:ed:f4:1f:a2:77:0b:fa:91:4a:aa:a9:53:29:ae:
         56:72:4b:25:bd:16:5e:b9:06:21:0d:16:9c:90:ab:d3:e3:f7:
         e0:cd:f6:27:3d:f6:5f:12:a5:fa:29:9e:32:99:d9:6b:7a:45:
         cd:31:32:9b:48:c9:d5:ee:3a:5b:89:e9:20:93:d2:c6:de:40:
         0b:90:4a:cc:5c:bb:97:46:1f:55:2c:4e:c0:2d:b7:ab:ba:8e:
         1e:6d:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:44:28 2025 by rpki-client