Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa
File:                     c368c218-5916-3a3a-8573-c64a126ea912.roa (raw, json)
Hash identifier:          n1HGiqiri8STVLUO1QWW++uXktz55vBnshk9BUQY/mY=
Subject key identifier:   C3:9C:B9:54:AA:EC:A0:CE:09:DA:74:A9:81:99:26:E1:FC:CE:E8:CE
Certificate issuer:       /CN=4182f5c3-1977-4f18-997f-c945eaea051e
Certificate serial:       010D0C9F43285849D594EC516FBEEC4EDC08D980
Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     18470
IP address blocks:        2602:814:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ec:51:6f:be:ec:4e:dc:08:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=1e055abc-293b-4877-99ae-f3d8bca11072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:d0:cd:47:cb:09:99:3a:3b:4d:af:d9:44:
                    76:7d:c2:9a:77:d4:c5:3f:03:1a:d5:19:a3:2b:18:
                    1f:d3:63:f0:6b:09:e7:c9:7f:25:76:e5:6e:06:d7:
                    eb:da:b9:60:f7:9f:d6:2f:50:c5:63:e4:41:bb:71:
                    4b:a8:4d:33:4b:1b:6e:11:d7:3c:6c:18:b3:8d:f3:
                    9f:8c:1e:57:14:76:66:69:f1:bf:7e:c7:8c:20:72:
                    bb:23:4f:f7:0a:4e:1f:95:20:d0:59:39:69:08:50:
                    20:7f:7b:b6:80:98:be:d8:33:52:e8:b4:34:db:50:
                    ae:89:e3:c8:cb:70:49:c2:82:bd:d7:6d:93:a1:72:
                    62:12:fb:52:f9:e4:76:d1:bb:c8:9b:d9:72:8a:0e:
                    8f:45:8e:a8:67:9d:ba:50:81:cf:fe:73:69:99:75:
                    14:69:84:9c:42:eb:84:4b:f7:a7:d5:ad:9b:01:fe:
                    6f:0f:4f:c9:57:47:0d:a2:3e:37:08:cc:45:ee:d2:
                    6c:58:e6:3f:c0:1b:08:69:e0:a8:26:d1:0e:df:ce:
                    ad:e5:0b:e8:68:79:10:70:6c:7c:6d:11:2c:7e:4f:
                    39:c4:69:01:55:e2:5e:89:8e:62:22:7d:b4:de:ce:
                    e6:63:41:e5:af:7f:dd:de:4c:d6:f1:3a:ad:f2:c3:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9C:B9:54:AA:EC:A0:CE:09:DA:74:A9:81:99:26:E1:FC:CE:E8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/c368c218-5916-3a3a-8573-c64a126ea912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:6d:f3:bb:a5:b9:10:f4:92:06:1e:5d:6f:02:59:2d:83:
         b6:0a:07:58:26:a4:cd:13:c6:c0:15:c9:31:39:33:1a:e2:6e:
         4e:15:48:2c:ac:74:2e:8a:e6:78:e1:a3:ce:fa:5d:7a:bc:57:
         ae:89:eb:5b:be:18:87:5f:6d:81:9d:cb:3b:4a:99:1a:4f:6d:
         e3:8c:74:d1:02:a0:a9:61:56:3c:2e:66:55:35:9d:c7:50:34:
         a0:d4:d2:c4:d2:36:73:19:f7:31:16:18:b9:38:d4:a6:37:de:
         e5:a5:e5:86:9a:77:61:d9:a1:95:93:3e:b9:37:36:98:1b:ce:
         43:43:66:7c:32:e5:2b:99:2b:d8:84:7c:a2:f1:25:c4:69:9c:
         1a:fc:df:7c:45:e7:a2:43:8f:4d:ea:7d:db:77:8c:ad:69:6f:
         2e:89:b4:96:08:ff:51:98:6a:ea:83:44:e0:80:2e:59:6a:59:
         31:4e:86:ab:94:da:44:52:60:82:ac:54:04:a9:8f:bd:45:c5:
         cc:5c:53:e5:4c:61:5f:26:cb:05:9e:7f:fa:5f:c9:44:2d:2c:
         ba:60:e6:47:de:5c:df:61:fe:dd:f8:91:e4:e8:88:c6:67:e1:
         e0:74:12:49:d5:52:a5:83:62:01:0b:1e:ec:ea:8d:34:07:9b:
         00:db:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:16 2025 by rpki-client