Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
File:                     ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa (raw, json)
Hash identifier:          dCXBn71gQqSc48MvyouOKDJWep4KhT25NrkvoA0jGRU=
Subject key identifier:   0F:E1:B1:00:C3:FA:FE:40:AD:B0:B6:DB:A7:EF:02:F5:43:62:31:1B
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F4328584A90A0BA9D6B52F896672E23C0
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     22296
IP address blocks:        2602:2e5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:ba:9d:6b:52:f8:96:67:2e:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=c809cb8f-b63a-4255-be1f-ef269f1af189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:48:cb:a3:bc:db:ba:7f:1f:01:95:05:52:
                    a0:cb:6d:3b:23:03:8e:24:6e:83:5c:6e:41:12:a4:
                    14:e3:ae:79:0d:ec:66:39:cd:c0:31:46:cb:da:99:
                    fb:36:65:f1:e0:b3:1c:e2:2c:cf:69:7a:46:b3:14:
                    41:d9:7f:07:31:d1:fd:53:9f:f9:8a:3f:66:15:63:
                    e0:b7:f6:29:76:c5:ca:94:d6:1e:15:e0:5f:7b:cf:
                    fb:19:89:79:df:e7:b5:40:cb:04:5f:08:b6:23:23:
                    46:57:48:97:2c:d0:ce:06:0d:60:f8:d8:70:7f:dc:
                    3c:cf:0e:a5:41:3d:99:0a:3e:06:f3:0d:ff:7e:42:
                    00:e2:0a:43:50:bc:da:12:1b:42:84:63:4e:d0:15:
                    7e:78:04:38:41:eb:b2:78:19:69:94:31:d1:e4:5b:
                    60:da:1c:2a:2e:fa:65:b1:d2:8e:3e:c0:da:6a:3f:
                    bc:c1:3d:a7:20:cf:48:43:2d:4f:f2:e6:c7:36:ec:
                    ff:0c:96:da:81:a4:b0:e5:94:37:c2:b6:9d:d6:a1:
                    28:d2:b1:08:e7:37:5d:7b:77:a9:52:5f:3b:63:26:
                    7a:0f:d7:65:bb:02:2c:55:c5:e6:12:d6:0a:b3:9e:
                    b9:01:48:58:66:5f:d8:94:4d:1c:e1:b2:61:98:d7:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:B1:00:C3:FA:FE:40:AD:B0:B6:DB:A7:EF:02:F5:43:62:31:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ac24fdcc-1307-304e-8ff2-84824a0d6ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:bc:7f:b1:0c:86:e5:2b:7f:55:fb:a9:e7:a8:52:da:5f:
         5d:cc:97:66:96:f3:7f:27:c0:fd:31:97:38:0c:2d:0c:09:0c:
         70:ae:90:34:f4:16:6d:4e:ac:54:97:c2:71:d9:f0:e6:1a:6e:
         a1:cb:bc:e5:53:cc:42:34:59:00:cf:b3:9d:9e:11:27:fd:fb:
         81:e0:fe:a7:63:78:8a:51:0a:b4:4a:65:5c:a6:db:56:7e:5f:
         e8:2b:89:df:3b:c6:71:a6:6b:e8:94:60:ae:8b:b2:84:d5:3f:
         1f:70:28:0e:9f:37:15:e7:d6:6b:a1:0f:4a:98:02:53:bc:b8:
         2c:f4:bf:2b:ed:d1:1f:26:60:f4:61:9d:78:3b:99:76:cc:96:
         be:f2:56:88:77:ed:2f:62:d3:09:e6:b2:86:d6:5d:47:47:49:
         3a:c4:cc:63:84:4f:aa:82:7e:cd:93:86:ae:e9:c2:04:5c:1a:
         ef:49:2d:62:1e:a1:9b:4b:f8:e0:6f:03:2f:7f:1e:2a:51:56:
         46:88:8d:73:ba:9b:08:ac:5a:65:03:9a:3f:58:ae:ca:76:3c:
         16:e6:7e:c4:05:e8:28:01:17:19:68:09:ce:d1:67:97:d5:22:
         a7:bb:3f:51:a0:48:2c:b9:f5:58:23:f0:69:a5:20:cb:c7:24:
         e5:e7:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:58 2025 by rpki-client