Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
File:                     9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa (raw, json)
Hash identifier:          5eJlXvE/zMsFfx5d/f36P08pX1bekRpchNFz+LZn5IE=
Subject key identifier:   E5:B7:20:68:59:8C:83:C7:EC:FF:6C:F8:EE:B6:EE:06:44:F0:FF:12
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285849C904EA342DA642EBA384B300
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     203283
IP address blocks:        2602:2db:11c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ea:34:2d:a6:42:eb:a3:84:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=53e4d58b-1064-49e3-8e30-6d3e5cdb7dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:75:45:76:5c:a4:d7:c6:22:83:43:e0:6f:
                    d2:1b:e3:47:df:1b:bd:35:d9:26:c2:0b:fd:47:8b:
                    47:4e:44:53:d6:67:ed:c5:3b:26:ec:ea:cc:9e:05:
                    30:92:20:fe:14:a2:0b:30:2a:58:3a:fe:83:a5:98:
                    11:16:75:23:e3:f0:02:98:e8:68:4a:7c:e0:4d:d1:
                    12:e9:d4:a3:b3:4e:50:35:74:2c:a3:34:b0:3a:96:
                    a5:8b:84:e9:6c:61:5e:be:ef:78:bb:f9:a3:62:91:
                    87:97:50:a6:29:0e:41:f9:d2:e9:71:c8:00:df:ef:
                    6b:02:cc:67:02:ca:33:48:7a:b0:c2:86:a9:cd:98:
                    da:a1:4b:23:f0:dd:c1:64:d8:2f:16:f4:03:70:e4:
                    9a:71:9f:9f:1d:9b:66:79:28:49:22:73:e0:93:c4:
                    12:95:ba:4f:2a:f7:32:a1:7a:9f:3e:73:fc:52:e5:
                    48:60:a2:37:3e:93:de:6f:b0:44:c3:a4:15:0a:09:
                    b0:84:1d:37:7d:1d:29:82:d3:14:00:e1:87:60:02:
                    39:47:a3:84:e6:30:00:37:23:68:12:df:e6:f3:95:
                    86:66:d7:11:ab:49:8b:a0:71:06:36:66:18:46:42:
                    06:b0:15:bf:d0:96:a1:82:fe:9f:a3:fc:88:dd:ff:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B7:20:68:59:8C:83:C7:EC:FF:6C:F8:EE:B6:EE:06:44:F0:FF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/9bed396e-0337-3bd3-85ee-db89f9bebe8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:11c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:78:60:e1:a3:79:f8:a7:a4:04:94:63:c6:c2:62:e3:30:bb:
         f4:a5:cb:ab:07:f6:59:0c:3d:ef:32:f7:50:95:cf:8e:d1:c5:
         45:9d:a7:0d:b5:fe:9d:58:61:74:81:2c:3e:4c:e4:c4:64:f0:
         00:ef:81:aa:6b:6f:5e:4e:94:8b:b9:39:f6:7e:e3:6d:d8:ce:
         1d:a9:76:6e:42:05:2e:af:0c:20:e1:7a:8a:26:ec:a8:bb:91:
         95:6e:75:b1:a7:d8:16:8c:5e:88:c4:ab:ec:46:b1:f0:9b:f2:
         bd:42:ad:81:bd:5a:e0:c5:10:41:44:80:39:aa:9b:04:d1:5f:
         4d:1d:29:dc:59:c8:0b:bc:69:c1:fc:fd:6a:03:60:46:47:76:
         ba:31:3e:a8:f0:75:d5:18:67:6b:65:d5:1d:05:eb:b5:d3:d9:
         8b:3b:57:40:de:36:fe:cb:d2:96:a1:1a:05:df:db:3e:d3:35:
         01:c4:cd:ae:95:75:9f:23:22:66:1c:a8:c0:25:ff:b9:37:8c:
         b3:08:d5:d5:1a:43:da:0c:c9:16:63:14:81:6b:45:d8:42:87:
         ee:36:56:fc:ee:3b:34:1a:9a:d3:f3:9b:df:54:35:31:3b:e8:
         6a:2b:9d:c7:bb:15:af:bf:16:1e:8f:49:2f:0d:5d:3a:09:54:
         d0:1d:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:08:35 2025 by rpki-client