Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
File:                     3a54cfd6-2753-3926-8778-b5bccb05925a.roa (raw, json)
Hash identifier:          ElKj0Vvbx+bkyAYI4mYDq9mOLrAYex8YfNE8+Gi0agM=
Subject key identifier:   20:02:8B:43:FF:DC:4B:47:1D:BD:1E:55:E4:59:59:08:0C:30:8F:89
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849F7151B187CDB6C8D4FC35040
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     31898
IP address blocks:        2602:fdaa:b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:1b:18:7c:db:6c:8d:4f:c3:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=6713a040-4e09-454d-bef5-a6faf003c193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:fe:41:c9:06:a2:24:dc:c1:a8:37:5b:c2:
                    66:53:c0:0c:10:15:88:d7:ed:03:47:3f:93:e3:3e:
                    2f:46:39:cd:dc:09:4d:fb:dc:a5:56:a0:d9:9d:b7:
                    42:87:59:99:59:e7:ea:57:4b:e7:8c:1c:71:8b:ee:
                    cd:0e:69:53:44:5f:58:38:be:de:80:ff:9b:3a:b5:
                    c4:46:cf:a3:80:0e:d9:67:d9:95:17:84:15:07:c3:
                    d9:1b:11:b1:fd:ae:65:7d:81:5b:43:f4:f1:5e:18:
                    90:19:a7:1d:3d:29:2d:3c:25:e8:5a:43:79:c3:70:
                    3a:b5:16:6e:fa:cd:42:73:53:b4:89:84:77:3f:ba:
                    db:fb:78:da:d3:97:32:69:19:bb:28:2c:63:12:a7:
                    cf:52:30:32:d2:c9:1c:8f:82:da:91:5f:5b:46:3d:
                    35:35:5c:60:b0:ff:29:45:0d:9f:52:ab:4b:e8:32:
                    3b:86:50:97:4a:bc:b8:13:49:f7:91:22:5b:bf:6b:
                    13:96:bd:d6:b5:2a:f9:0b:d4:0b:68:3f:5e:f9:27:
                    2c:d3:39:66:81:0a:3c:70:21:38:df:a9:34:cc:83:
                    68:60:31:aa:c6:48:00:a7:1d:a8:1c:d5:ed:03:14:
                    57:ef:10:fb:05:ea:fd:28:46:8d:56:d6:0a:eb:d2:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:02:8B:43:FF:DC:4B:47:1D:BD:1E:55:E4:59:59:08:0C:30:8F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3a54cfd6-2753-3926-8778-b5bccb05925a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:be:6d:5d:79:43:45:c9:fc:0d:d3:1a:2d:08:fc:cd:6a:
         a8:48:63:6c:65:44:38:ac:30:e5:dd:c6:54:26:53:f9:2c:cb:
         ba:9a:9b:81:3f:fd:a3:1e:a3:68:38:fe:ff:be:81:a3:60:9f:
         b6:39:0e:8a:dd:a4:77:3e:f1:53:6e:be:ae:b0:15:bf:f3:5a:
         90:0e:95:20:63:9e:a2:f1:3a:99:da:0e:0d:84:e9:36:7b:30:
         8f:15:ac:85:17:25:d1:b9:15:c8:e0:26:34:ee:d0:e0:f5:1f:
         cb:45:19:a7:2f:c7:51:9a:24:08:d7:a8:33:3b:3e:01:5b:74:
         f8:d1:78:38:ce:e9:e9:90:5d:91:68:21:4b:28:98:c2:b8:ed:
         0c:9c:6a:42:fd:0a:98:37:2e:fc:f2:5b:60:93:ca:4f:66:7b:
         6c:85:6d:9d:d3:7c:82:98:59:90:73:0e:12:b2:e7:e0:94:8d:
         55:5d:fc:41:44:1d:26:ec:9b:d3:d5:25:af:0a:5e:84:fa:95:
         fd:53:97:f8:6a:04:02:45:ae:1e:64:0b:cd:4d:ae:ec:99:e7:
         e1:38:17:22:46:ca:6a:02:25:22:ec:a6:3d:4c:bf:c7:da:ff:
         40:97:13:0f:07:bf:f0:f2:a3:ec:c3:f5:8d:c7:63:57:bc:98:
         53:56:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:47:30 2025 by rpki-client