Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa
File:                     8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa (raw, json)
Hash identifier:          zuzKo4hp/TMvwGavt5E6mbjeT6d9YvXMBfh+SFhSSek=
Subject key identifier:   25:85:16:82:AB:0D:75:78:85:0B:2E:75:52:60:AF:DA:63:D8:37:1E
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F43285849D85F7F95940261D3E9650900
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     398898
IP address blocks:        2602:808:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:7f:95:94:02:61:d3:e9:65:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=dde17033-1bdb-460e-b968-8611c4ddfb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:65:5f:71:62:30:bd:1c:b0:2d:0e:35:fc:
                    9c:05:6f:6b:74:51:2b:56:c5:ca:69:ef:82:5d:39:
                    24:57:2a:4f:04:49:c9:f8:c7:42:67:59:6b:c9:0b:
                    e5:8d:fd:c1:9b:03:5a:d4:39:c5:c9:69:97:67:8f:
                    87:3e:d6:e9:f7:88:48:14:dd:36:9c:37:8d:8d:75:
                    c5:90:43:94:bc:05:78:19:d9:a4:9b:be:75:04:26:
                    f5:c3:33:4b:b8:12:74:89:b6:32:03:c2:82:db:15:
                    90:da:18:03:52:49:f2:64:16:ab:8d:a7:b9:ad:a5:
                    1e:68:30:ec:23:bb:71:3c:84:f5:a1:09:e1:7a:70:
                    55:1a:22:65:93:75:18:8a:99:8c:9e:ab:95:31:f9:
                    bd:f1:5a:3f:ec:31:ab:0d:98:b5:8b:93:5e:f4:bb:
                    5f:32:8e:12:0f:26:bc:40:ab:de:1a:03:86:7a:ee:
                    12:4d:86:b6:47:ad:4e:be:47:5f:8d:50:94:d5:fd:
                    54:f6:4b:93:1f:de:0c:8a:2c:7c:f1:02:f8:ba:7d:
                    67:34:76:63:a5:1f:c9:29:b4:af:03:b0:6e:3a:bc:
                    f3:5c:c0:2a:3e:b5:57:2f:e5:4f:f6:f7:93:35:1e:
                    3d:71:f6:86:d9:0a:1e:7f:56:68:54:e9:c7:4b:27:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:85:16:82:AB:0D:75:78:85:0B:2E:75:52:60:AF:DA:63:D8:37:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:58:95:d7:10:f0:68:48:c6:c6:43:92:d1:4e:78:e1:e1:
         c0:99:c0:46:ae:bb:79:aa:8f:70:f1:3f:48:19:34:40:42:31:
         9b:6b:00:f8:80:df:c2:c0:06:dc:7c:b8:67:86:53:4a:9b:dd:
         dd:9f:32:eb:43:23:14:1f:ce:6d:d2:ff:4b:80:79:e9:99:2a:
         6d:45:74:df:3b:0e:34:61:49:f7:16:fe:7a:c9:6e:6f:86:e7:
         04:bf:c6:30:ba:6a:7e:33:4e:3f:8c:76:f4:68:fe:93:52:47:
         ed:e3:80:77:33:ee:93:4c:79:1a:8b:d0:80:33:40:05:fa:d1:
         19:a9:63:1e:a2:69:7c:3b:05:a4:1c:61:a6:61:2d:0c:ca:58:
         07:dd:91:06:98:31:47:19:21:f6:47:35:83:84:0d:f7:d1:20:
         fd:cd:a9:77:45:84:85:d0:db:c7:ce:c5:07:bb:08:c9:e8:0b:
         20:94:30:72:5c:11:f2:23:d1:97:bf:fd:89:5e:14:5e:0b:5a:
         db:27:98:1e:c3:54:7d:24:a1:ba:14:a1:6a:31:ae:cc:d7:4a:
         1c:db:c3:1f:cf:e2:a7:73:f3:81:3b:20:0c:09:f4:a2:22:06:
         4c:4a:71:a6:07:f2:17:26:bb:ec:e6:30:22:c2:c0:fd:2b:6b:
         ea:28:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:47:13 2025 by rpki-client