Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa
File:                     7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa (raw, json)
Hash identifier:          9SE5xLDSpy9ojNnAcXXKvIE2HX9XIMq6bXTbGdny4I4=
Subject key identifier:   BC:C4:AA:F8:8E:7B:82:BD:C3:57:2D:59:4F:A0:62:D8:5B:25:F3:60
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F43285849674EEDD45FA4608D94A06680
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     1024
IP address blocks:        2602:fca7:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:ed:d4:5f:a4:60:8d:94:a0:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=d3c30b86-92ec-4ef1-af6c-9df566d34f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:48:55:e9:6f:db:a6:9d:9b:74:bf:f7:0e:73:
                    df:44:60:15:5a:d8:31:99:9a:83:83:b2:3c:ca:20:
                    cb:7e:c4:fe:17:12:60:0c:f5:c8:6a:28:e8:2a:af:
                    c0:7a:cb:36:4c:ed:43:7e:32:24:e9:8d:c6:42:60:
                    40:9a:7c:1a:94:7b:67:d1:3d:6b:c2:80:0c:0b:09:
                    ef:ef:83:76:16:7e:b2:26:91:ea:b2:34:86:58:c5:
                    49:fb:ff:66:67:4a:c5:01:58:a3:f5:07:74:35:f7:
                    04:6c:15:85:27:c6:9e:1b:42:96:15:4d:d6:21:74:
                    2f:53:6e:3b:84:13:78:d9:0d:91:fd:18:38:f4:39:
                    66:13:3e:3f:5b:fc:24:c3:eb:34:8f:03:00:22:d2:
                    ed:df:de:fa:a2:5c:7e:05:dc:4b:66:fa:15:49:04:
                    04:5e:67:09:70:33:28:3c:0a:6e:92:01:64:6c:8b:
                    c0:e9:65:17:62:6e:cb:25:76:ea:9b:56:e8:f4:1c:
                    bb:34:6a:a3:40:89:fd:6b:2f:9a:06:f0:32:49:40:
                    c8:8d:0e:54:1a:ac:11:bd:3c:9c:ea:ac:a2:d4:d0:
                    33:ac:89:ba:09:51:57:f2:a8:4d:26:02:b9:1a:7f:
                    10:7f:25:b9:f0:0f:bd:ef:f3:b6:54:fe:0c:db:59:
                    1a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:AA:F8:8E:7B:82:BD:C3:57:2D:59:4F:A0:62:D8:5B:25:F3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/7acb1c8a-d3e8-3da1-a91e-c69bea6982ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:be:87:a6:81:bd:57:5e:e6:85:cb:0c:7d:a4:06:06:dd:25:
         19:7d:2c:0a:70:7b:ef:5a:28:da:79:8d:39:6c:cc:59:b2:68:
         87:1f:12:32:b9:c1:8e:67:b8:79:9e:ba:98:84:3c:88:bc:f4:
         66:5a:c7:5c:e3:b3:0d:79:dc:a4:b6:1b:0b:44:bd:61:6c:03:
         11:3d:55:ca:2a:85:de:fe:8c:ac:0a:0b:6b:14:7f:8f:56:17:
         91:de:04:ec:ae:6c:60:69:76:32:fe:bb:b5:e9:78:7a:27:fd:
         79:bd:ec:f0:55:d6:3c:85:4c:f0:64:9f:8b:80:9a:c9:79:1e:
         23:b9:10:d2:ea:36:5a:a1:7f:d5:fb:19:c4:40:7c:69:54:17:
         48:83:03:0e:c8:67:6e:25:58:1f:0d:d3:a1:45:b3:8b:f1:fe:
         1c:37:29:a2:40:5a:4f:ad:7a:29:01:b2:3c:90:75:af:de:5e:
         91:dc:82:33:cc:72:f1:08:0c:7a:08:4f:d9:f3:d3:7e:f1:90:
         a8:a1:bc:8d:b5:31:1c:28:b7:9b:69:bd:5d:3d:fc:91:7f:27:
         42:8a:03:32:d3:1a:61:b1:7c:c8:38:e0:0b:0a:e4:18:87:5a:
         7b:4d:0c:63:82:76:c2:21:e1:96:27:23:6e:d9:49:bb:e9:e8:
         64:54:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:07:36 2025 by rpki-client