Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/4813c162-1bde-3df9-8e1c-20feca6a82e1.roa
File:                     4813c162-1bde-3df9-8e1c-20feca6a82e1.roa (raw, json)
Hash identifier:          avndNHW1jn4u1ulmAjhitjF0XjfNsrxUMDjVBV66r/s=
Subject key identifier:   48:A3:EC:C4:23:D2:12:06:2A:EE:FC:20:41:06:B0:8F:02:2E:6C:4B
Certificate issuer:       /CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c
Certificate serial:       010D0C9F4328584A0EEAD1CCAF47595E44888A00
Authority key identifier: 0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/4813c162-1bde-3df9-8e1c-20feca6a82e1.roa
Signing time:             Mon 02 Jun 2025 13:55:13 +0000
ROA not before:           Mon 02 Jun 2025 13:55:13 +0000
ROA not after:            Sun 31 Aug 2025 13:55:13 +0000
asID:                     40346
IP address blocks:        2602:816:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:ea:d1:cc:af:47:59:5e:44:88:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b2de73-1d42-4595-8cb1-9e82d873ee1c
        Validity
            Not Before: Jun  2 13:55:13 2025 GMT
            Not After : Aug 31 13:55:13 2025 GMT
        Subject: CN=b3018671-e6b8-4dbc-8d57-104a3cf223c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:94:25:a9:3c:0e:60:e5:79:7a:e6:63:4b:
                    cc:aa:70:9f:60:7e:a1:94:3d:2b:5a:9b:57:4f:3d:
                    87:28:ac:9a:0d:14:76:9e:8e:9b:44:9f:45:be:9f:
                    b8:e9:ef:56:0d:a6:59:7b:ee:c2:cd:ba:4c:83:16:
                    eb:3e:87:49:2c:b3:d5:a8:56:7a:14:b9:5e:23:82:
                    46:47:4a:a2:50:fc:26:40:94:b8:c9:3e:72:94:37:
                    ae:e7:6d:c7:5e:77:0b:49:41:04:7f:40:96:ff:a6:
                    11:61:57:af:53:cb:ca:76:8e:b7:d0:ce:ad:56:5f:
                    d4:2c:15:d9:f6:f5:f9:26:b7:8a:07:c1:20:c5:e4:
                    3a:40:79:f6:ff:13:ef:53:8a:bd:b3:04:62:3e:4f:
                    c2:48:d8:35:9a:b3:d0:f9:50:72:c5:e6:a9:f8:a4:
                    76:44:eb:d5:a8:f1:8d:f6:fa:b2:fa:52:4b:b1:42:
                    3f:2d:84:97:40:a4:a4:24:18:1a:81:12:68:80:b6:
                    96:f5:98:cd:28:e4:46:04:bd:2d:44:39:db:a2:5a:
                    c6:5d:62:f8:e0:77:1c:08:26:15:ad:2f:0b:99:47:
                    84:63:4a:dd:62:27:01:f2:2e:4b:34:73:3d:f5:39:
                    db:92:56:4b:f4:ac:48:12:2e:aa:90:41:8c:e5:7c:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:EC:C4:23:D2:12:06:2A:EE:FC:20:41:06:B0:8F:02:2E:6C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/4813c162-1bde-3df9-8e1c-20feca6a82e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c/85b2de73-1d42-4595-8cb1-9e82d873ee1c.crl

            X509v3 Authority Key Identifier:
                keyid:0D:96:6E:E6:35:D4:0C:D0:10:70:F8:F5:78:51:C2:47:F4:F6:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/85b2de73-1d42-4595-8cb1-9e82d873ee1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:e9:53:50:f3:c1:91:73:83:31:a5:13:07:3b:31:55:82:
         6e:7f:50:14:29:85:11:52:63:a7:e4:8a:19:e7:9e:42:e8:29:
         44:3f:ab:27:c1:95:a0:51:1f:6d:91:8d:8a:b3:f3:b6:9b:07:
         cc:d8:67:4e:2a:6f:84:ca:25:cd:d4:fc:92:cb:97:90:61:51:
         b5:57:8a:38:d7:d6:a9:63:d5:37:89:2a:f7:05:40:34:f0:81:
         f8:f8:92:ac:6f:f2:98:24:a4:c0:3f:e6:e5:fa:b8:a5:22:10:
         50:d4:1c:65:5e:3a:ca:aa:8f:66:7e:98:af:52:c7:6a:ce:19:
         0a:ea:a3:a4:c7:2b:92:b5:81:c4:97:d7:8e:4d:c9:e6:45:41:
         88:b9:24:2e:1e:39:de:ae:c8:27:92:ee:c2:33:56:e7:9e:26:
         af:9b:f4:5a:59:54:03:7d:eb:0c:98:ec:ec:f2:7e:fc:b0:de:
         7b:86:14:ab:39:bf:68:67:e5:a0:66:f4:f9:0b:31:15:09:7d:
         bf:d0:f0:b5:70:56:c7:4b:a3:c8:21:8f:f2:97:d1:3a:18:cc:
         f1:c9:be:6e:72:86:38:d7:e7:4e:19:06:21:c2:c0:0e:0f:8f:
         93:5b:7f:9c:ca:80:c4:66:e6:f0:d2:4b:6b:71:75:db:37:66:
         51:f9:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:34:59 2025 by rpki-client