Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa
File:                     fb61fbb2-966c-3035-9349-36a35742a9da.roa (raw, json)
Hash identifier:          1pyhMCYs9ovVRmWd4OJ3ylY7OtH+Zmha6VG84VPELEg=
Subject key identifier:   AC:D0:2D:35:D9:20:65:B5:42:D9:E7:A2:C2:DD:E7:4D:9D:AD:3B:EB
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F43285849BB0F75317A36BD9E961B7280
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     400861
IP address blocks:        2602:2da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:75:31:7a:36:bd:9e:96:1b:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=6e992c4c-83d3-4fcd-86f8-4ac425cf95c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:53:32:56:79:1a:7d:dc:7b:92:75:b9:0a:
                    18:8e:f4:e7:ad:6a:93:7b:27:98:e9:bf:4e:14:27:
                    95:6a:f9:e1:91:ae:86:37:99:96:0c:29:e5:86:72:
                    80:cb:33:94:cf:b1:9f:c3:97:ca:3c:c4:99:4d:0b:
                    82:0c:b0:d9:83:76:ee:9d:b9:c2:13:63:df:e5:47:
                    ee:b4:98:5c:b5:75:ac:41:7e:92:16:f2:28:78:c1:
                    cb:e2:f6:c5:24:45:4a:ca:f3:7c:3d:0b:77:fa:ea:
                    15:cf:da:ea:18:46:91:29:3c:92:b4:2c:59:4a:e9:
                    bf:05:6b:42:1d:0a:ad:68:32:ac:57:13:9f:ac:80:
                    8f:86:71:f7:e4:94:d2:6b:d9:f3:c6:eb:ec:76:d9:
                    42:b9:9b:ce:47:cb:a1:fa:fd:2b:27:6d:4e:89:31:
                    69:a0:bd:9d:9f:a1:f3:dc:68:bd:d6:4c:46:dc:ba:
                    ad:b1:0c:bc:0d:b3:0e:77:37:6c:1a:98:4e:8f:f5:
                    88:c1:b1:a8:16:9b:06:75:82:fe:d5:bf:75:71:45:
                    44:ba:0a:2d:5e:52:64:cd:60:1e:e1:90:49:d9:4e:
                    6d:d3:2c:c3:78:1a:b7:65:8a:38:72:3e:61:bb:eb:
                    d8:58:0f:0e:b8:fd:77:e8:5e:8b:5d:b5:25:d6:f7:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D0:2D:35:D9:20:65:B5:42:D9:E7:A2:C2:DD:E7:4D:9D:AD:3B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:95:b5:d5:8e:5f:74:3e:f0:24:6e:be:ee:f7:2e:d5:87:
         ba:fc:b0:6f:8b:96:1e:0b:31:6d:f5:f6:31:92:d9:bb:c2:ab:
         93:ba:60:d3:94:49:72:6e:d4:4e:d2:88:34:80:1b:e5:52:0d:
         e4:22:61:fa:4f:a2:d7:b0:34:f3:9b:4e:f5:39:13:b5:02:6d:
         87:73:2c:cb:2a:0d:6b:29:d2:7a:5e:62:96:0b:ec:67:f5:90:
         90:68:07:c2:10:65:53:ad:67:0d:18:c2:93:43:5a:7d:0a:4c:
         b8:a5:ee:27:4a:9e:bc:24:10:96:f8:f0:fe:bd:69:37:66:3b:
         6a:ab:92:0c:68:65:de:91:f6:f5:0b:94:c6:34:9a:c4:d7:0f:
         d3:e0:94:d8:2c:b9:c0:17:b0:0a:3c:d7:06:ef:4e:cd:c2:d2:
         91:5b:69:7e:69:20:c6:60:2d:80:22:e7:2c:8b:27:bd:e3:47:
         c5:c0:40:ed:32:c4:76:6f:18:13:41:cf:ea:60:dd:8f:2e:c4:
         54:60:ca:ca:45:1e:a0:91:5c:cf:ea:0d:f4:ce:e3:6e:9b:45:
         3d:6f:a1:db:03:1b:cc:be:08:ff:bd:88:9e:fa:7f:8f:63:36:
         1c:f0:30:51:64:5a:d1:2e:f8:ec:83:9f:bf:c1:b7:6f:31:60:
         77:4d:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:22:19 2025 by rpki-client