Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          DHIvxUdqJq5VDSnwXr9uotIIIKKxhl3HCEevyLuEpYg=
Subject key identifier:   6E:52:92:59:1A:EA:57:8A:31:BA:E0:D1:11:02:A3:FE:8B:92:12:D1
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F43285849F17FB028355DC8D655E32D80
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b0:28:35:5d:c8:d6:55:e3:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=98a711b0-4b0f-4699-8991-39510989f44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:6e:0a:74:8c:d3:4a:21:d3:ca:aa:7a:fd:
                    97:36:c3:06:ad:f6:c6:02:35:7b:32:2a:00:fc:1b:
                    6b:eb:19:fb:49:08:f9:c5:0f:58:c2:8e:c0:8d:8c:
                    18:70:d2:15:9f:ec:84:80:42:46:4f:a5:98:00:7d:
                    6a:cc:d8:b5:87:ee:6e:ed:27:43:ca:da:08:25:b1:
                    04:2f:67:74:02:a7:90:6d:45:a4:0c:e1:07:c8:9b:
                    0d:ee:69:9d:eb:ca:d9:95:08:d9:6e:ef:d3:a5:7d:
                    08:23:b8:7f:88:6b:1c:39:a0:41:88:15:e5:a5:e0:
                    2c:47:03:ea:4e:f4:20:23:4e:51:55:98:60:b6:cf:
                    e7:4b:93:f8:88:26:8a:38:02:d5:6c:a7:97:f0:88:
                    ed:f6:04:22:a4:4a:8a:96:08:51:08:29:92:f0:fb:
                    53:cb:00:c1:f5:88:cc:55:69:b6:d8:e9:18:b3:b4:
                    5a:6f:97:da:35:c0:53:40:d2:43:d7:8e:64:20:0b:
                    92:bb:52:11:7f:e9:1c:d6:71:02:15:dd:e8:0d:d5:
                    84:d1:41:b1:62:d3:d4:35:8a:c1:eb:b0:8f:61:e7:
                    d1:11:f0:d8:e4:65:60:66:aa:85:e5:70:c4:6a:0b:
                    ca:de:39:45:52:97:e5:2c:76:7a:22:7e:eb:89:50:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:52:92:59:1A:EA:57:8A:31:BA:E0:D1:11:02:A3:FE:8B:92:12:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:18:70:9b:f3:de:00:f2:c6:52:74:e8:83:77:59:43:2c:
         8b:b6:67:ea:7e:4c:6f:c7:f2:5c:0b:f5:c8:ec:ca:ef:0e:51:
         98:1b:b4:98:c3:cb:fc:ac:67:55:56:9a:3f:c7:60:bc:30:64:
         3a:22:4a:8c:df:33:51:a8:91:ce:42:9f:05:5f:67:af:af:55:
         5f:be:8a:f2:89:cc:89:75:7c:19:23:dc:e2:a2:c7:d5:9b:93:
         88:d6:b1:89:48:cb:fa:11:6d:73:85:f6:d2:fb:1f:79:89:bb:
         23:f7:70:da:e7:c9:3f:2f:fd:74:7f:27:a3:29:39:d0:2a:25:
         cf:27:be:a8:34:1a:97:4b:6d:55:72:da:83:c0:c3:cd:86:2d:
         e6:eb:46:9f:9b:bc:3d:55:f8:ea:8e:45:3b:47:70:35:49:a7:
         97:7c:ae:06:98:09:46:45:5e:24:a6:24:fb:18:86:6d:c0:6a:
         ae:82:b5:13:d8:d1:7d:19:91:37:94:cf:d2:63:e5:bc:20:4d:
         86:d7:2d:64:2c:33:7a:24:50:94:c8:f1:eb:56:5e:c2:02:ec:
         25:86:dc:fa:f4:b1:86:3f:aa:6c:cd:bb:6b:c8:a1:69:8d:33:
         3c:e5:90:74:b1:ab:da:96:4e:cb:b6:24:36:e8:1a:6e:1b:12:
         b9:48:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:31 2025 by rpki-client