Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
File:                     83e053be-e67c-3e61-9877-60e586960fb9.roa (raw, json)
Hash identifier:          /r3kDIb4a+6sSM5ddQktAqkwIgmVMXb0eTKzqSYd8Cg=
Subject key identifier:   5B:00:46:79:76:26:30:39:D0:CB:18:B6:1B:83:11:5F:15:A8:A5:ED
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F432858498E647932792D3C00646C2F00
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     203125
IP address blocks:        2602:faaf:1::/48 maxlen: 48
                          2602:faaf:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:79:32:79:2d:3c:00:64:6c:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0a777f0f-8fb1-4df6-b427-25942aa4fde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:2f:aa:77:cf:c1:ee:d4:21:10:41:fd:35:
                    be:f9:9a:2b:53:c7:15:e9:0e:23:b7:0b:9d:94:9d:
                    de:e3:85:7d:61:16:00:ec:25:8b:26:a3:13:08:00:
                    6c:8e:c5:3e:6f:4e:26:48:c1:f2:9e:f1:18:85:26:
                    a3:90:55:f4:02:9a:23:7b:7f:cd:e3:88:71:37:4c:
                    27:03:af:28:ea:0b:d0:3a:c3:c7:1f:ff:07:62:63:
                    62:84:37:46:a3:ac:cd:b0:99:59:e1:ce:e6:69:1b:
                    6d:29:7f:f2:78:3b:59:aa:71:90:0a:a5:57:b9:28:
                    b4:6a:18:46:c1:5a:28:bd:28:a0:13:cc:10:4e:d2:
                    af:44:64:29:e7:25:a3:15:51:89:2f:ca:31:42:e8:
                    87:45:49:53:8e:85:a7:d6:88:8a:64:3a:82:5e:aa:
                    27:4e:c7:61:77:db:28:f2:4b:1b:d6:a4:db:83:10:
                    e1:46:17:0f:be:81:d4:af:4e:44:e9:e1:9a:95:c5:
                    bf:fb:1f:e2:e9:eb:3f:7c:60:7b:a7:c7:6e:64:6d:
                    5f:f9:89:e8:99:5f:79:75:63:80:48:a8:80:d9:7f:
                    74:68:15:ba:2f:2e:29:bb:32:67:ba:71:5c:76:1e:
                    12:14:78:45:13:23:60:5f:6f:9d:26:81:74:ff:86:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:46:79:76:26:30:39:D0:CB:18:B6:1B:83:11:5F:15:A8:A5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:72:54:7e:67:09:a5:e1:f1:c0:a0:74:bc:ec:03:d9:06:
         71:e5:dd:3e:f5:af:77:92:da:92:1b:37:70:1a:c0:42:26:5a:
         be:e4:fa:4f:28:60:14:db:69:ea:78:b0:e6:71:e6:9c:d2:d7:
         7b:a8:86:4c:69:ad:25:39:24:7f:fa:c2:41:da:04:38:d8:c4:
         10:99:a4:86:56:a6:a8:13:be:61:06:c3:a8:d8:1d:39:0b:cd:
         6a:5a:11:18:2c:41:32:dd:48:5f:6e:b3:88:cf:81:a6:90:f0:
         c9:e4:db:a7:d6:43:57:90:ec:36:c6:26:5a:44:52:7f:7b:8f:
         cd:73:e9:69:e0:c1:42:a2:1a:d7:10:7e:80:3a:f6:b1:bd:95:
         93:2b:f4:8e:47:2c:13:c5:79:67:7b:c7:75:94:3d:f2:d1:f4:
         40:3a:11:83:1d:c6:e7:ff:4a:36:ad:0b:6b:bd:a2:97:7a:c8:
         35:7f:98:2f:99:1c:f1:37:fa:71:6e:4f:0d:a1:61:9f:7b:e5:
         bf:d1:85:46:96:00:0c:92:ae:27:eb:2d:d9:86:02:4e:1a:f5:
         e0:32:0a:90:e7:d9:22:90:49:26:d4:f4:6f:e0:b0:8f:b6:44:
         fc:7b:94:fa:2f:bc:a3:8a:7d:d6:65:6e:83:1d:a2:b9:2b:44:
         19:84:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:05:12 2025 by rpki-client