Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
File:                     3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa (raw, json)
Hash identifier:          HOqRGbUHRBrVyGmmEAANbA0Ri9ldBALxWoKAQjzyvqI=
Subject key identifier:   F6:10:49:27:E0:20:28:E9:49:58:ED:BA:A5:89:08:0C:88:57:10:7A
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849F715258B3406CC490E3EEAA0
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1218
IP address blocks:        2602:fdaa:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:25:8b:34:06:cc:49:0e:3e:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=dee1f4d7-053d-4d68-8f40-0e7fe1a434f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:83:de:37:7e:96:dd:ff:11:c0:b7:2b:ed:
                    cd:2b:1e:bc:6a:db:2a:bb:ab:a7:41:b6:26:d5:54:
                    cc:5a:ad:14:6a:36:29:69:29:5a:dc:42:71:08:c4:
                    7e:6d:af:e2:25:73:c7:a9:5b:33:14:fa:f4:58:40:
                    c5:95:eb:65:1e:44:6c:c1:a5:7d:7c:51:29:0f:0e:
                    9d:05:40:5c:54:f6:68:74:a4:a7:54:57:e6:91:4d:
                    32:8f:21:91:1d:e5:b2:d5:69:b0:98:b2:e1:ff:ac:
                    c8:9c:ce:7c:88:56:02:43:b2:0d:63:a1:d8:a5:54:
                    8e:c6:0b:0d:d9:a9:54:6e:0d:a8:6b:ea:3a:ea:ea:
                    bc:6e:10:a2:f3:d6:68:23:51:f8:e6:46:82:96:79:
                    c0:af:60:ff:8e:f9:78:6a:4c:9b:d0:05:98:c6:11:
                    e5:6e:fe:69:a4:c1:59:e3:c3:17:55:be:9d:06:1c:
                    86:ab:45:0e:81:02:fb:8d:41:36:5c:82:3b:ee:4b:
                    30:df:4a:d4:b3:21:d9:ee:15:f6:c1:b2:e4:22:6f:
                    97:6f:6c:d6:f5:91:87:c9:2f:31:a1:6e:f2:d4:b8:
                    1e:ac:7c:e8:73:b3:a9:26:ec:2c:74:59:59:6c:45:
                    c6:22:46:77:a5:72:3f:6c:2e:55:71:48:84:be:c9:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:10:49:27:E0:20:28:E9:49:58:ED:BA:A5:89:08:0C:88:57:10:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/3be9c053-770e-31e3-93e1-7b7b5a308e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:c8:51:80:ed:83:04:a7:ed:9f:64:b1:a8:ce:dd:19:53:
         98:3f:19:65:2c:16:42:96:97:0c:8c:ee:19:88:05:a3:41:c6:
         06:45:09:be:97:4f:ad:2b:f6:0a:dc:b3:1c:36:e4:c9:3e:a0:
         9a:8e:be:7c:cd:f5:98:82:7d:56:f6:23:9a:85:95:e6:48:d8:
         11:56:73:31:6c:34:b9:b0:a3:aa:12:04:26:4c:49:51:a8:13:
         48:bf:c1:eb:44:f2:cc:00:19:4e:75:4c:4f:de:82:f1:30:41:
         89:cd:a2:0c:ac:f6:9c:c7:0e:53:f2:78:f9:d1:e1:4d:8f:1e:
         0c:ed:5c:c6:a3:5c:fb:46:21:a6:08:73:52:79:c1:fb:08:c0:
         f3:9b:9f:f9:83:4f:96:a0:76:9c:c3:c6:63:7c:a0:6f:8c:52:
         91:a2:ac:82:7b:04:78:a6:10:69:b0:76:7e:60:03:cd:9c:97:
         b3:76:d0:7a:56:05:76:ef:07:b5:19:51:9f:0d:21:de:64:b2:
         f0:cb:40:f9:a0:20:73:0e:20:9f:a8:b1:b6:88:eb:99:5a:23:
         d4:50:d7:72:e6:a6:fd:2b:cf:34:84:13:da:0b:0e:ce:2a:f7:
         33:da:11:dc:cc:3d:f0:df:a8:74:b1:2a:9f:5d:cd:f3:17:73:
         37:68:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:41 2025 by rpki-client