Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/5deecb9b-7793-38e4-bb11-8b4240502ee8.roa
File:                     5deecb9b-7793-38e4-bb11-8b4240502ee8.roa (raw, json)
Hash identifier:          UrnTJvCAJRr6XfX8WA0BmZ0KxlyD1L2dvsZvMPVTcW8=
Subject key identifier:   5D:C8:48:20:CA:2C:3A:39:FB:A0:0F:0A:81:E4:16:43:4B:06:E8:2F
Certificate issuer:       /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial:       010D0C9F43285849A8E9E1A740ACC55C2D5CA140
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/5deecb9b-7793-38e4-bb11-8b4240502ee8.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     23121
IP address blocks:        2602:f913:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:e1:a7:40:ac:c5:5c:2d:5c:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=97ca8fcb-2cac-48da-8e1f-649bde180f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:60:6c:1d:b2:6d:27:09:38:03:fa:a4:86:
                    7c:aa:76:87:e4:e4:d1:56:2b:ee:83:dc:5b:85:69:
                    5b:c1:05:99:14:2e:77:4b:f3:3e:30:ca:80:05:d6:
                    65:9e:08:01:7d:8c:d7:d5:d9:4c:9a:e5:13:43:bc:
                    ff:33:02:1a:c6:57:d4:ed:10:92:48:5d:0f:30:15:
                    7c:b1:ab:c5:d4:88:58:5e:bc:ae:42:a7:64:b9:51:
                    25:ff:ff:9f:29:2b:14:02:bf:51:73:0a:33:76:cc:
                    5f:41:bf:2c:e6:94:a4:c0:c4:a1:ab:b2:f1:23:ac:
                    ea:1e:eb:b3:90:6d:38:61:99:d0:a7:8a:7d:30:fb:
                    00:3d:76:dc:6c:69:9b:7f:33:9f:27:b1:64:1d:1f:
                    ab:2f:6b:9b:4d:8b:49:2d:20:b8:77:c7:58:e1:f0:
                    7c:48:68:ca:48:73:19:77:eb:eb:73:10:e9:ad:a3:
                    ea:cb:68:bc:98:64:1b:82:91:9c:a7:88:90:f9:7f:
                    7e:09:69:d2:98:2a:c3:00:8d:14:d1:9d:a2:dd:45:
                    b3:be:1e:5d:d3:a8:bb:c3:6d:d6:61:47:69:65:18:
                    82:17:f6:bd:72:d8:9d:38:13:35:af:1e:ad:33:e0:
                    dd:d0:3f:a0:06:82:f5:bc:aa:18:01:4e:7d:32:b9:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C8:48:20:CA:2C:3A:39:FB:A0:0F:0A:81:E4:16:43:4B:06:E8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/5deecb9b-7793-38e4-bb11-8b4240502ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f913:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:58:51:89:98:75:18:a3:0f:3c:62:8b:ec:04:65:5e:5a:40:
         30:a0:5c:c2:31:9f:f1:5f:b7:c1:40:5b:2d:39:44:20:a6:ad:
         b0:50:a1:07:70:17:46:2f:f0:13:52:ea:6e:7a:d8:d0:03:e0:
         81:cd:a8:c7:9d:67:75:0b:56:f1:0c:4c:15:c0:97:20:41:81:
         03:db:2e:b0:a7:45:9d:45:c6:73:ad:79:4e:99:b3:ae:ab:44:
         a0:aa:07:46:84:04:36:5e:6f:45:4e:3f:b9:71:22:18:be:8f:
         bf:50:6a:c1:88:91:71:1c:80:b8:97:3a:59:2d:42:fd:e8:74:
         5b:f4:9d:0a:78:79:25:5a:e2:08:2d:c2:fa:00:6a:db:80:39:
         20:b5:d7:52:c8:86:b0:ac:76:7c:1a:4b:14:c3:ad:c8:44:bd:
         fe:46:1b:90:30:be:1c:86:9c:d8:1a:c7:44:1b:76:c2:ca:43:
         88:06:0f:b3:37:7e:65:83:e5:ef:64:11:10:ae:bf:95:82:01:
         ab:ed:a3:e9:ea:3b:7a:fd:0b:44:ab:13:87:b7:d5:55:78:3a:
         0c:27:35:ba:7a:43:0e:5b:86:21:ce:3f:c7:82:a4:62:ea:bf:
         0a:c9:73:8b:99:ca:c3:62:94:fd:92:fe:3a:a5:4f:e4:92:1c:
         a0:2d:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:42:08 2025 by rpki-client