Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
File:                     2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa (raw, json)
Hash identifier:          sHoyKFfntdrjOoeUtE/PH3l9KDRdrwnocN7sFiyDZk0=
Subject key identifier:   86:34:71:9E:71:9C:91:11:EF:60:A5:61:6F:DB:D9:60:9B:5A:6C:B8
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F432858499C59E3F193A4801AE287E820
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa
Signing time:             Tue 22 Apr 2025 13:01:00 +0000
ROA not before:           Tue 22 Apr 2025 13:01:00 +0000
ROA not after:            Mon 21 Jul 2025 13:01:00 +0000
asID:                     26768
IP address blocks:        2602:2a4:9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:59:e3:f1:93:a4:80:1a:e2:87:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Apr 22 13:01:00 2025 GMT
            Not After : Jul 21 13:01:00 2025 GMT
        Subject: CN=7098a2ca-f906-49f1-89c9-6ce4d6c2e143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:14:6d:4e:c3:67:3c:43:83:67:0f:b6:98:4d:
                    eb:e6:0a:45:65:b2:9f:dc:13:5d:34:24:50:22:64:
                    c0:a8:95:46:29:e6:50:96:76:c6:07:ef:3b:60:bf:
                    c1:ef:9b:3e:36:62:27:e3:cb:88:36:7f:fc:d7:27:
                    de:ff:53:29:12:e7:8d:e7:e7:39:d7:1a:5b:df:52:
                    ff:97:bb:f3:bc:fd:bd:0e:d3:c9:6b:19:f6:bf:5f:
                    2f:7e:9f:be:e9:54:0a:9c:20:76:6b:7d:53:2c:04:
                    32:f8:72:12:4d:ef:19:e5:19:fa:ed:77:4e:97:ac:
                    59:8e:a8:6e:cf:3f:9f:64:35:75:8a:b3:3b:34:94:
                    3b:ea:df:ae:95:9a:71:a6:67:13:8c:30:38:22:dd:
                    38:19:52:34:6f:93:d8:0e:00:a6:3f:6f:3e:78:c9:
                    a0:d0:d5:d4:6b:3d:bd:73:2a:7d:74:d6:b5:53:2b:
                    b3:2b:29:a6:9f:37:32:95:34:c6:24:87:10:a5:c4:
                    51:77:9d:80:3d:76:47:4c:cf:d1:7b:17:63:f6:e1:
                    34:f2:bf:fe:20:71:b1:43:7e:22:00:72:82:4f:fa:
                    0c:1b:5c:f6:80:40:cd:ac:ef:51:24:12:5a:84:ba:
                    c3:68:56:0f:e7:9a:63:24:b4:ab:f2:73:78:37:85:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:71:9E:71:9C:91:11:EF:60:A5:61:6F:DB:D9:60:9B:5A:6C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/2bc2e026-ed3b-3b6a-b54e-b115e2343099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:63:d5:36:2d:7b:4f:55:6c:b9:e4:91:d8:c6:73:7f:c0:
         70:ee:5e:4d:d4:2e:df:bc:d8:6e:a6:88:b3:33:06:7e:6b:c5:
         ea:c0:95:55:74:d1:64:b0:0d:d5:53:28:b8:0e:ca:fd:04:cc:
         32:bc:01:86:85:c5:58:23:12:25:65:c4:b6:e2:2c:9d:9c:80:
         d9:ee:60:7d:ab:3c:bd:70:96:07:e8:8c:86:bf:46:0d:1c:cd:
         23:2a:e3:9b:1a:81:26:ad:6f:d7:7f:2d:75:c2:ed:67:29:87:
         f4:04:2a:07:3e:26:46:f7:c3:31:4c:b9:ee:25:1b:5d:b2:3a:
         8a:df:30:c2:45:71:0a:c6:85:80:61:f0:93:10:63:bb:5f:d4:
         29:78:98:f9:08:35:25:dd:82:5e:a6:d9:e4:09:36:d4:9f:38:
         cf:c0:06:4a:b9:48:6e:c0:a6:62:d5:58:60:df:8f:b6:36:5b:
         ea:ba:41:a9:1d:59:a7:bf:46:c1:d2:2b:cd:e2:e2:a2:51:9a:
         b2:0c:a0:e5:f5:65:36:d1:8f:0c:b9:f9:1f:9d:26:04:8b:59:
         bd:c6:13:0f:cd:aa:13:d6:6d:c6:11:9e:aa:0e:0d:41:1c:c3:
         b7:23:66:57:34:56:6e:9a:17:72:0b:25:40:bf:65:d1:48:b9:
         26:28:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:47 2025 by rpki-client