Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aa3d454-5201-3df9-9e5b-352126ef1463.roa
File:                     7aa3d454-5201-3df9-9e5b-352126ef1463.roa (raw, json)
Hash identifier:          lG1/yGfaJsKTlJjlWrhCkncApNptReThMnWI+GFRypQ=
Subject key identifier:   0F:64:E6:CB:BB:2F:F8:7A:79:71:E5:49:EA:8F:AB:BE:D8:0A:9F:CB
Certificate issuer:       /CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
Certificate serial:       010D0C9F43285849D594E95369F7663C6863A2F0
Authority key identifier: F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aa3d454-5201-3df9-9e5b-352126ef1463.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     6206
IP address blocks:        2602:fc48::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e9:53:69:f7:66:3c:68:63:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e8d9f-d9ea-45cf-8fb9-2811e86b81b2
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=09f23e7a-e4ef-499a-9b6c-af5b611bc8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:99:a0:fb:57:c0:bc:94:c4:41:4c:0a:bc:ee:
                    0e:cb:95:fa:e3:4b:b9:a4:d3:fd:c7:2a:e3:e5:d8:
                    55:47:70:30:3c:02:5e:c3:1a:ee:98:b1:7d:4f:54:
                    d2:db:27:49:d1:2a:4d:89:85:cd:9e:04:66:5a:de:
                    0f:fc:2e:de:29:4c:25:68:0a:30:36:a5:d9:5d:f9:
                    9b:e9:36:5f:1f:09:76:10:90:8d:b4:07:bc:88:f0:
                    95:2a:81:70:df:a3:e6:6d:c3:62:90:2d:11:e4:db:
                    01:d4:85:b3:b3:b1:ff:9b:34:e7:8b:c5:7c:60:9d:
                    8e:87:d4:2f:ad:9c:4b:50:47:1c:e7:a7:81:3f:7d:
                    14:b4:6b:f5:ba:49:e1:07:d4:ee:d3:25:d8:49:77:
                    d8:bc:50:63:89:af:ee:71:36:d7:7c:fb:85:83:85:
                    8d:b3:17:be:2e:af:55:16:0f:ed:6d:b0:62:4f:8e:
                    ee:d0:59:18:64:c9:57:40:68:a6:33:b4:1e:fe:db:
                    2a:50:7d:f5:20:c9:86:e6:dc:06:e3:53:ce:e0:4c:
                    6f:ce:68:4b:23:6f:77:77:ac:ab:6a:38:ee:90:49:
                    53:27:8d:4f:63:5e:49:92:e5:22:b3:46:4b:63:2f:
                    57:ae:b6:22:75:1f:44:39:d1:98:ba:37:b1:97:49:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:E6:CB:BB:2F:F8:7A:79:71:E5:49:EA:8F:AB:BE:D8:0A:9F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/7aa3d454-5201-3df9-9e5b-352126ef1463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.crl

            X509v3 Authority Key Identifier:
                keyid:F2:B3:28:9C:11:A4:6A:18:99:01:CF:9B:8D:24:3E:97:D0:04:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/451e8d9f-d9ea-45cf-8fb9-2811e86b81b2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc48::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:74:32:96:e0:9f:fd:a9:16:84:0c:81:68:6a:6e:7d:a0:
         8d:77:b1:73:12:66:5a:6b:ca:62:b8:77:54:d8:eb:8d:1a:01:
         5b:ac:1e:86:cd:9b:c6:a7:3e:ba:d9:9d:db:29:81:4d:08:47:
         90:70:14:03:6a:c1:19:ed:3b:02:a4:c6:55:fc:f8:01:ae:97:
         b1:b3:f4:d5:b8:c2:47:4e:58:36:ac:bc:18:74:00:08:62:96:
         ee:80:43:00:60:a1:d4:6b:97:de:54:31:00:10:71:e9:58:6f:
         d2:0e:d7:72:2b:19:cd:55:0d:45:f4:43:a8:b2:83:e2:13:a6:
         2c:93:c1:cb:4b:42:c3:07:50:ee:dc:c2:52:be:48:82:63:e4:
         a0:18:8b:fa:83:24:3d:f8:7e:2c:48:2d:c3:fa:6d:77:f6:9b:
         ca:d3:14:ea:0e:56:cb:dc:8c:a9:4e:7a:27:04:7c:2c:f2:f5:
         8f:d9:04:ca:28:71:58:83:a5:21:d8:39:cf:ca:7a:fd:f0:e9:
         43:71:c9:46:7c:a6:e6:f0:f6:bd:f0:9b:b7:60:e7:8e:83:05:
         97:ba:9c:b8:81:47:72:2a:3d:a7:b3:27:3d:a0:2c:5d:17:3b:
         11:81:b9:4d:26:ab:e4:43:24:50:27:12:0c:53:cc:a5:11:da:
         03:d0:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:06:26 2025 by rpki-client