Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa
File:                     680a6712-e585-31ba-aba5-8fd9451f0560.roa (raw, json)
Hash identifier:          qfoxqleTfm3/Rnd6VpJuUrG69FY3x5hGZ9oNDnf1IGU=
Subject key identifier:   79:44:D0:E7:9D:86:D1:E1:54:E8:FC:8D:A2:03:8A:74:81:9F:B8:1B
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F43285849EBEA5230CBAC9E1FFD27C880
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     214258
IP address blocks:        2602:fbe8:f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:52:30:cb:ac:9e:1f:fd:27:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=902ca826-0005-4823-a20e-2f0fd3e75dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:d2:8f:2f:fd:08:b4:37:93:4d:2b:c9:9b:
                    9f:ab:e7:21:d7:d0:e1:89:c0:89:21:0c:3e:45:4f:
                    b2:43:fa:57:6c:3b:a9:b3:eb:80:f1:52:ba:9e:96:
                    1d:8e:ad:ed:9e:27:ea:fd:ba:61:1e:34:7d:19:89:
                    a6:f8:41:61:73:a2:e0:10:71:25:42:1a:d2:b5:d4:
                    9f:eb:7e:2b:4e:02:59:13:de:8a:a6:9e:01:db:e4:
                    46:65:b9:b5:b2:84:3f:bb:c2:33:b5:69:c3:c6:bf:
                    41:03:a7:6b:1a:e4:90:42:8d:16:ad:78:3e:ad:29:
                    80:89:20:3a:90:c0:f8:0f:2d:8b:67:bb:ca:75:e3:
                    1e:0e:17:8f:09:b6:bf:9b:94:51:da:14:67:f7:7d:
                    79:f6:c2:7c:79:96:46:31:57:a2:a3:c9:aa:c6:f4:
                    78:18:a2:4a:29:ce:9f:a7:77:3c:fb:2d:60:a9:b8:
                    80:0e:9c:6f:29:86:34:11:81:b7:1e:7c:29:1a:5e:
                    ce:5b:60:52:cd:f7:58:58:c4:a8:aa:e5:73:06:4e:
                    38:92:56:8b:1b:ac:fd:98:02:eb:c6:4c:cc:d3:da:
                    bd:54:9f:e3:34:65:44:03:c2:dd:e4:7a:1a:94:b6:
                    27:9d:03:69:0d:c7:d5:d3:c3:fd:9b:34:6e:37:e5:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:44:D0:E7:9D:86:D1:E1:54:E8:FC:8D:A2:03:8A:74:81:9F:B8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/680a6712-e585-31ba-aba5-8fd9451f0560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:90:2e:fb:35:1f:1f:05:54:cb:89:4b:89:c9:9c:45:0d:82:
         dc:9c:cf:40:de:7e:3a:e8:fc:2e:71:06:6e:34:93:20:df:dd:
         95:34:61:0e:38:5e:32:e7:13:7c:42:a6:93:f6:e5:f5:a0:7e:
         ca:f0:ec:74:75:5d:49:f5:5f:8a:07:f5:d5:01:0c:b5:fe:a7:
         95:61:5d:28:15:4f:06:c1:b6:ca:95:45:ba:3c:d1:ce:d7:94:
         4f:f0:20:2b:d9:2e:1b:c6:67:f2:c5:c7:c1:0f:2c:66:56:58:
         9e:52:b2:01:31:4d:59:b5:63:c6:37:a6:5d:1a:11:d8:69:ba:
         27:64:bf:74:7e:ee:b1:5d:f0:90:67:81:f2:8a:cb:46:4b:0f:
         26:9b:c8:ab:77:d3:d8:7d:5e:df:a7:f9:02:e2:90:05:dc:72:
         ed:71:b0:fc:0e:88:48:c2:16:ec:ef:9e:5a:9e:ff:15:d8:76:
         a0:4b:0b:a5:43:66:33:bd:e7:25:83:5e:a4:11:5a:80:2c:4c:
         54:c4:b6:ca:ac:96:70:04:e1:50:38:fb:80:47:56:b1:a8:9b:
         a5:6a:82:32:cb:50:77:e7:40:07:d2:ae:3f:1e:dc:dd:2b:03:
         8b:dc:cc:7b:94:1f:69:72:0d:4f:2f:e3:af:d8:85:4b:a8:d5:
         8f:a1:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:20:48 2025 by rpki-client