Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
File:                     8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa (raw, json)
Hash identifier:          7Q99vwNOCZ2sbaiIZajs9vhP/TrCnDpzOAi+8Fb9bf0=
Subject key identifier:   59:C8:30:B0:FF:F2:83:6E:0B:9F:E1:05:3E:8F:98:62:83:30:CB:D0
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F43285849F01A6F3F07D4DA2172DD7F80
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     40124
IP address blocks:        2602:299:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:6f:3f:07:d4:da:21:72:dd:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=4c8eac3f-3196-4f6c-966d-7eadd6ed1dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:93:18:ec:75:71:10:98:2c:e4:df:66:0c:
                    ec:bd:eb:9d:44:fc:01:dc:0a:ce:03:78:86:80:0a:
                    2e:5b:29:31:61:77:78:00:2b:e2:c9:4c:49:b9:96:
                    46:0b:dc:78:94:b8:a7:68:95:79:e2:ec:b6:12:b4:
                    be:bf:b5:a8:68:20:9c:7d:80:97:10:6b:d1:c2:92:
                    d9:3e:17:50:f5:60:a3:3c:fd:b8:84:a2:02:e9:84:
                    89:4f:7e:8c:1d:01:96:89:ef:60:61:e1:f7:39:9e:
                    43:69:fa:8e:81:64:f0:c8:51:e5:12:48:09:f6:c7:
                    ee:51:e0:25:03:11:28:d2:db:51:21:14:aa:d7:1f:
                    33:83:7b:15:b8:49:61:5d:10:92:3c:0f:26:a8:9c:
                    d2:ee:3c:f6:d0:62:08:c5:75:17:f3:56:df:70:52:
                    2c:a7:1c:67:91:2d:d0:15:77:5a:c6:5a:5f:a4:2f:
                    dd:f6:a1:01:b0:54:eb:f4:7d:ab:0d:64:48:fa:4b:
                    20:b0:49:5b:0c:16:6a:c9:16:46:69:08:42:c6:1e:
                    91:99:14:38:a2:eb:7c:cf:11:fc:76:96:bc:c8:ad:
                    11:53:68:43:06:73:61:11:11:f2:70:ac:46:b3:0f:
                    24:4a:b6:04:d9:1e:2c:4e:69:2f:e5:6e:35:b1:a0:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:30:B0:FF:F2:83:6E:0B:9F:E1:05:3E:8F:98:62:83:30:CB:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/8cd0ffac-ec2d-3e06-a98e-4aee50ee9992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299:50::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:c5:c3:f0:1a:99:c5:b6:43:87:d9:81:6c:e4:d9:32:1c:
         96:6e:88:bd:af:c5:f6:f7:b0:d2:18:8f:78:9c:02:94:dd:9a:
         38:73:89:69:b2:f3:ad:d0:4f:92:02:73:d9:dc:19:34:4f:43:
         05:48:2c:a2:5a:bd:38:fc:14:b8:64:18:e4:57:4e:1d:13:8d:
         60:d0:32:0b:de:b3:42:62:c1:c1:c0:d8:d2:84:39:5a:04:29:
         36:9d:0d:3d:a0:25:fc:cd:4f:7c:77:6c:5f:c7:05:98:b8:7d:
         38:79:fc:9d:5d:48:ab:2e:25:c4:b7:4b:ca:80:fe:29:03:ad:
         64:ba:0f:fc:b9:0e:67:24:6c:99:3d:f8:01:7b:f2:d3:ec:6c:
         da:61:44:c8:c8:ff:a0:79:38:17:ff:e6:88:8a:54:a1:88:43:
         4e:31:a2:fd:27:f3:5c:6e:44:f1:91:cc:31:94:b0:3e:89:da:
         ac:db:a4:8f:5c:fa:83:65:d4:b1:7f:ad:2c:16:68:a8:f6:95:
         2c:b6:60:3d:79:fd:86:fd:fe:ca:14:29:19:43:6a:a4:c5:83:
         a4:4c:3f:0b:b2:26:81:f4:a7:a3:aa:46:8c:a0:66:93:1c:07:
         32:8a:a5:d0:6a:70:32:f6:e1:73:26:af:dc:e5:8d:51:fe:c5:
         ae:5f:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:58 2025 by rpki-client