Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa
File:                     855b63a5-cefe-3157-be0a-9281c2ca43e4.roa (raw, json)
Hash identifier:          k8cUTq96bfAJeGjH5Tn3OfgPaWpQFN+Tl0i+itO1QYI=
Subject key identifier:   B3:B0:12:E4:C4:90:01:6A:BB:CF:67:47:15:C6:D0:DE:BF:04:FB:4E
Certificate issuer:       /CN=dfc88768-1b58-474d-a340-376827992098
Certificate serial:       010D0C9F43285849E91FA6BA98956B4FC2765940
Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     21629
IP address blocks:        2602:f773::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a6:ba:98:95:6b:4f:c2:76:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc88768-1b58-474d-a340-376827992098
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=60d80e97-9ceb-433b-99f4-ca6873f681b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:28:a8:8c:19:bb:06:f6:43:9a:b1:b0:57:
                    55:bc:47:a1:2e:20:66:55:ad:67:68:4a:a5:a5:a5:
                    58:eb:ee:5b:cd:69:33:28:65:1c:02:1e:2e:86:c5:
                    48:48:3e:8b:f4:20:40:a5:82:39:f4:88:7a:cc:11:
                    29:26:c9:41:0c:7e:ab:d8:18:c2:0f:f2:af:04:44:
                    ce:24:5f:e8:07:b4:d7:01:c3:aa:91:4c:36:a3:c2:
                    c7:fd:bc:5b:7b:ae:29:42:54:13:50:33:11:95:e9:
                    bb:29:04:0c:26:4b:fe:f9:0e:8a:0a:86:2d:3b:09:
                    23:f4:27:ae:24:58:ff:d0:07:24:00:78:c3:88:a7:
                    be:39:41:7a:4e:24:c0:53:1a:2f:6c:fe:76:1a:39:
                    b4:ea:5b:2f:3f:ce:88:a5:5f:b6:78:09:9e:fe:98:
                    de:83:11:1d:de:ce:d6:a9:00:12:71:59:69:1d:87:
                    af:19:5d:20:eb:bb:1b:e8:64:ad:fd:97:ff:bb:a0:
                    f4:d9:67:8d:27:82:31:54:1f:94:7f:3e:91:11:74:
                    1d:6d:4e:8d:79:d5:3b:f1:37:62:80:6e:2f:c1:74:
                    e1:20:07:a8:bb:c2:ee:8d:aa:04:1d:9a:e2:95:52:
                    28:7d:01:a1:dc:a5:42:d4:aa:f6:f3:21:12:64:47:
                    e1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:12:E4:C4:90:01:6A:BB:CF:67:47:15:C6:D0:DE:BF:04:FB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/855b63a5-cefe-3157-be0a-9281c2ca43e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl

            X509v3 Authority Key Identifier:
                keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f773::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:ad:02:85:26:18:e7:f4:1d:a7:1f:98:14:b6:84:ed:f8:
         fd:40:ca:20:7e:72:65:73:6f:89:30:ee:b4:71:98:1d:0c:3f:
         36:e9:4b:a5:98:c9:41:0b:88:c5:4a:0f:94:44:83:24:ac:27:
         2d:10:cf:e9:63:ed:3c:35:eb:c8:97:75:48:3a:d3:3e:b0:3c:
         a9:3a:5f:ff:e5:ca:c4:d1:c1:d2:a1:f6:ca:a9:e6:45:1b:9b:
         ee:95:33:17:39:bb:86:d7:82:d0:3e:a2:1d:6b:3e:b9:64:17:
         89:c1:d1:c1:c5:08:23:1f:b9:65:24:56:09:d8:29:c0:dc:28:
         d2:7d:a9:74:39:63:91:11:00:9a:6d:4a:a3:3d:c8:a1:3a:50:
         92:5a:f0:73:97:bf:5f:fc:6f:db:fd:83:e5:90:98:ec:d2:0a:
         c7:7b:57:59:c7:bc:5b:40:53:54:28:e2:bc:ef:ea:af:b1:8a:
         67:c6:06:e9:b3:d3:49:29:bb:3d:ed:45:d8:45:06:34:00:32:
         97:aa:d0:28:73:da:3c:28:8d:95:63:08:85:f7:b3:66:0c:a7:
         dc:e1:cb:a6:7e:ee:0f:bc:20:00:26:d4:d9:b2:83:cc:51:a7:
         1f:00:ad:a1:a7:14:08:7b:62:55:7f:81:a3:ee:d5:db:ed:ba:
         e5:9b:e4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:45:31 2025 by rpki-client