Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa
File:                     7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa (raw, json)
Hash identifier:          k9HWNQTx3dbL2587lP1XfvQF13Bmt3Kxtc9nc/f96o4=
Subject key identifier:   F3:8C:A0:CE:8D:E7:24:6F:23:D3:D6:3A:45:30:EA:1D:7F:FC:27:4A
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584A07D5311E20A1CC896A8E3B00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     198342
IP address blocks:        2602:2b7:c42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:31:1e:20:a1:cc:89:6a:8e:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=ff8b2198-e4d1-4769-ba26-adc8f74e2f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:9e:16:bc:09:17:a5:0a:ac:90:c2:75:87:
                    b3:fb:b7:1e:4d:b6:06:0f:59:68:ef:23:61:ac:23:
                    1e:fb:7b:9b:32:33:73:b2:61:42:bc:57:bb:e5:13:
                    24:20:43:1d:18:f1:88:5e:2e:29:7b:4a:5e:cb:94:
                    cb:0d:5e:d2:c6:43:ad:8a:c4:3d:d5:5b:66:b9:45:
                    26:ac:8a:fe:86:cc:11:a2:40:ba:03:9d:c0:aa:92:
                    9d:19:c6:99:24:6c:ef:f8:20:6a:26:63:54:68:84:
                    b0:5b:25:9c:3c:1b:b2:7b:4f:b8:bb:0a:e8:85:da:
                    bc:9e:ba:b9:df:bb:88:9b:11:a7:d6:1c:9c:a5:e7:
                    14:56:49:0d:a8:b7:ee:37:e5:71:8a:af:52:9e:d5:
                    c3:5b:af:93:5d:6d:26:80:5b:b9:05:7b:38:0b:11:
                    5d:b0:7a:00:e3:c5:d5:31:1a:9c:c3:63:cd:15:bd:
                    d7:87:a2:96:53:1f:1f:10:70:76:73:8d:a2:45:ef:
                    8b:38:90:49:7e:b5:71:74:00:b7:92:5a:32:99:8e:
                    8c:f4:bd:bf:dc:ee:79:a9:6d:fa:6f:ba:e9:71:3c:
                    5a:f3:82:60:d9:e3:af:a6:2b:28:1a:cb:fd:ea:47:
                    ca:e8:8a:6b:28:e3:97:57:47:bd:6f:d4:f8:a7:16:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:A0:CE:8D:E7:24:6F:23:D3:D6:3A:45:30:EA:1D:7F:FC:27:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7f05bb23-dac7-31e3-b18e-09a2edf6c2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:f8:2a:78:d4:d8:99:bc:7a:30:28:3a:31:ea:1e:eb:49:
         fe:32:0a:89:25:6d:50:74:04:0f:b9:07:44:5a:dd:90:63:14:
         aa:ab:ef:dc:2c:7e:58:e3:1d:96:af:7d:fa:45:81:27:b9:be:
         c5:7d:66:4b:fb:e1:5b:76:fc:10:6a:3d:e6:63:65:42:ca:c0:
         10:1c:2c:07:3e:e0:27:60:ab:a4:1a:c9:5f:65:af:11:e3:2d:
         96:a0:dc:22:65:a5:bf:10:a3:0c:ae:e8:10:00:cf:fc:ff:53:
         da:1a:96:f5:29:61:12:6e:ec:a7:72:21:f5:51:6a:61:20:24:
         f7:c7:17:08:32:ea:94:31:b0:c6:21:8b:c2:7d:54:c7:f7:b8:
         4a:e7:23:f1:fb:3b:a2:80:67:f6:07:1f:a5:15:94:35:05:49:
         53:48:78:d8:69:8f:7e:3a:02:c9:46:fc:14:d4:ae:bb:97:7d:
         a8:db:b2:ea:55:c9:17:86:44:f5:45:e1:7b:82:ed:fd:4d:79:
         a7:d6:6e:ef:c8:13:38:bb:56:7b:49:5b:6e:f9:d4:e7:e2:41:
         71:9c:01:97:5d:00:15:5c:bc:66:93:bd:da:c5:b5:92:de:69:
         3d:65:d2:a5:b1:2a:d8:11:c5:76:4b:24:7d:3c:84:2b:a0:81:
         fd:80:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:01:00 2025 by rpki-client