Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
File:                     eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (raw, json)
Hash identifier:          l1RQT7xrsLyFVvZZgUkS3H2+vm71Wq6oH469PjK8pe4=
Subject key identifier:   4C:E8:C2:1D:C2:0F:45:BA:42:8D:23:80:41:FE:0F:BB:68:C2:F2:6C
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F4328584A9900B384FA074C29F91BDC00
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     26431
IP address blocks:        2602:f666:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b3:84:fa:07:4c:29:f9:1b:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=590a5235-a758-4396-bb39-15390fed6350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:0c:85:76:a9:95:0f:df:e9:ea:73:af:56:
                    35:60:bd:36:85:f7:c3:14:81:3f:44:8e:53:f1:ab:
                    59:db:95:98:ec:bb:91:f8:77:76:3b:3d:d4:a1:05:
                    a8:67:0c:46:87:ca:26:a2:d9:10:74:7b:a8:b4:33:
                    62:44:25:e6:59:e8:f5:5c:c0:3e:87:af:f8:0d:91:
                    2f:d3:60:7f:57:50:b3:d1:0d:c7:fe:1f:cc:83:bb:
                    45:84:99:10:aa:eb:4a:34:fc:fc:bd:38:50:77:9d:
                    37:6b:eb:59:cf:60:05:d6:a2:e7:b6:2f:ec:7b:9c:
                    7b:70:30:a1:0d:f6:d5:93:cd:b1:f8:f2:51:a4:10:
                    ea:15:a3:4b:1d:c8:c3:ce:7b:e6:30:7d:f1:42:7d:
                    56:f0:cb:63:b8:ff:6a:5a:18:37:07:d9:11:62:1f:
                    d1:1d:73:32:96:cb:2d:cc:a0:1a:d2:50:aa:97:0a:
                    7a:a5:ea:78:7f:01:d3:2f:e0:44:ca:cb:3f:62:4e:
                    bd:bf:10:c9:10:81:04:df:a1:4f:87:cc:eb:e5:c6:
                    3e:66:74:25:db:c9:b4:63:dd:c0:a5:94:a3:b1:c0:
                    17:ef:77:9f:46:a0:33:66:9d:78:cf:70:11:39:88:
                    20:26:1a:a1:76:bd:be:bb:26:a3:74:fe:47:eb:3a:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:C2:1D:C2:0F:45:BA:42:8D:23:80:41:FE:0F:BB:68:C2:F2:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f666:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1c:79:34:27:5f:d2:86:97:eb:33:26:4a:01:b5:26:23:65:
         25:07:b6:0d:73:72:fd:49:1c:1f:ed:0f:f7:1b:a3:5e:82:00:
         65:8d:d6:5d:10:7a:36:a7:a3:e9:6d:c7:29:16:60:7a:12:c9:
         59:13:7d:e9:c5:4e:70:d9:e2:e4:ba:91:43:96:06:a5:c4:59:
         12:fe:89:3d:84:c4:0e:65:bf:e2:54:fd:99:22:5d:22:67:be:
         e4:78:b3:ab:34:f8:9a:8a:e4:c6:a0:a3:45:0f:51:c2:18:68:
         69:95:fc:81:10:c6:0f:7f:f8:31:00:0c:c7:e0:01:00:fc:3c:
         df:53:89:2a:af:25:7b:3c:76:bb:a2:06:c6:eb:e8:f2:ed:dd:
         e0:7d:26:d6:50:2f:a4:f3:c9:b6:5d:2c:35:a5:c2:d7:02:65:
         cb:e1:44:ea:94:ae:5f:2f:62:bb:8a:96:27:81:b4:c8:0b:05:
         b0:f4:7e:31:11:bb:59:f3:ab:4e:1a:0c:a5:e5:aa:20:fc:18:
         1e:9b:76:c6:a3:2c:db:3c:a9:29:45:09:02:b6:94:f0:c4:bd:
         cd:af:08:26:eb:ee:f7:66:00:64:a7:df:72:69:4d:33:d4:1a:
         2e:98:86:07:37:79:0f:38:d9:a2:d8:f1:59:52:b0:46:4b:6d:
         d7:a2:c6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:57 2025 by rpki-client