Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9471077a-0168-389d-a8fb-09801ad5b5ed.roa
File:                     9471077a-0168-389d-a8fb-09801ad5b5ed.roa (raw, json)
Hash identifier:          6gX91HgIqUXkVAITNicmyRmA5rN8T+mrUu7Ll2czhzY=
Subject key identifier:   58:3B:B1:5E:39:1D:50:FA:7E:F8:00:A4:B6:BC:17:23:53:01:4B:09
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F432858499DBF2AB51B6517CFEDE6D840
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9471077a-0168-389d-a8fb-09801ad5b5ed.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        2602:fcd8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2a:b5:1b:65:17:cf:ed:e6:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=d586032d-2d37-4b81-954b-eef1249793e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:e8:e6:14:c1:3f:d0:7b:f3:77:c9:d4:4b:
                    f0:27:eb:71:aa:56:72:da:06:aa:e1:18:67:29:0a:
                    25:29:09:84:dc:74:3a:68:cd:21:67:74:eb:fd:7a:
                    b1:2e:12:fa:b0:b0:d6:46:d6:ae:ff:cb:f1:e8:46:
                    3a:5e:25:7a:78:75:c3:73:b6:f6:45:e7:db:45:99:
                    07:59:bc:5f:4e:78:b1:25:47:15:d4:1a:66:e6:91:
                    a2:8a:4a:8b:79:61:78:ee:40:58:42:61:2b:15:57:
                    67:ae:d7:8e:cc:78:6c:c7:94:2a:71:ca:b6:d5:6b:
                    2e:35:bc:d2:2d:46:37:19:70:a3:42:02:9c:0a:18:
                    51:b6:e0:73:5c:9e:70:1e:f3:2a:95:b3:ba:b3:b9:
                    6e:05:74:f3:63:11:10:39:41:73:4e:22:94:75:da:
                    bf:61:e6:b4:30:f9:df:c7:14:01:a6:a7:45:27:a6:
                    28:04:fb:83:a0:ed:76:da:d3:86:f8:ab:97:8d:9e:
                    70:e6:2f:50:6f:be:17:78:a8:07:52:c3:b3:c1:fa:
                    c9:9a:b6:c8:5a:34:a0:2b:e6:18:6b:9a:9b:2b:70:
                    88:3b:b5:6f:73:98:b4:0c:dd:c5:2d:b9:d2:ca:4a:
                    bc:19:1a:fd:24:6a:19:ec:00:75:40:d9:a5:5e:af:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:B1:5E:39:1D:50:FA:7E:F8:00:A4:B6:BC:17:23:53:01:4B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9471077a-0168-389d-a8fb-09801ad5b5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a3:1c:ee:9b:b6:75:0b:fe:cf:93:c4:a3:70:af:13:89:04:
         6f:d1:34:60:8f:83:50:60:a6:cf:15:4f:0f:b5:04:1e:e0:7c:
         a7:16:b2:4a:b2:0e:1a:bb:18:a0:63:f2:c2:41:e1:0c:94:45:
         9a:8b:47:a0:be:b4:39:1b:39:ed:13:d2:36:86:2c:76:44:19:
         e6:f5:fb:ae:b6:75:ef:d1:e3:c6:c9:c7:02:09:53:00:92:51:
         88:91:2f:f9:5d:94:53:65:48:c4:68:d9:6e:6c:16:31:bb:c4:
         24:1d:f4:a5:09:dd:bf:88:26:4d:08:94:84:03:77:f6:73:e4:
         5a:0c:d5:b4:64:76:b4:c2:8c:c3:ca:54:80:b3:80:d1:23:c0:
         2e:99:df:c5:49:d6:a8:e3:bd:96:4d:3d:b0:2a:b4:76:f7:66:
         45:23:05:fa:80:3f:56:a8:e4:5a:05:5c:dd:75:0e:6e:46:12:
         de:cc:4c:3d:a0:63:93:7a:66:99:d2:59:73:21:20:27:fd:08:
         af:c0:7c:2e:8d:c8:d6:03:0d:8b:1f:0b:11:8c:61:29:ed:5d:
         09:99:1b:bd:2e:e5:30:da:12:d9:c2:be:18:0f:83:41:09:68:
         94:78:78:ba:3b:81:98:3d:bb:46:bb:cb:c0:15:0f:de:4c:d7:
         2f:b6:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:45 2025 by rpki-client