Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa
File:                     4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa (raw, json)
Hash identifier:          uma11r5pg7q30fpagpE4auAsWTychbDGOHkGjoQE+yI=
Subject key identifier:   9E:F9:84:27:2C:D7:20:A7:DA:F5:CA:13:36:68:7E:D2:45:AF:10:5E
Certificate issuer:       /CN=b673aad8-2248-407c-90e8-0781473d6616
Certificate serial:       010D0C9F4328584A00B0F2FF76A27658D9567CC0
Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa
Signing time:             Wed 28 May 2025 11:37:18 +0000
ROA not before:           Wed 28 May 2025 11:37:18 +0000
ROA not after:            Tue 26 Aug 2025 11:37:18 +0000
asID:                     19922
IP address blocks:        2602:f676::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:b0:f2:ff:76:a2:76:58:d9:56:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616
        Validity
            Not Before: May 28 11:37:18 2025 GMT
            Not After : Aug 26 11:37:18 2025 GMT
        Subject: CN=663a6d4a-9bb8-42cb-9c4e-26e53417ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:93:15:f4:11:4f:4b:0d:f3:a7:d5:44:9c:
                    5c:f6:d9:2e:67:39:da:35:39:05:48:96:b4:bb:f9:
                    e9:6a:91:2f:6f:38:90:00:10:ee:31:14:f2:81:7f:
                    56:22:98:e4:5a:80:44:9c:83:c1:9a:1f:90:f2:47:
                    1c:be:e9:9b:b4:65:c7:bc:a1:e4:9e:4c:07:9d:e7:
                    55:be:1f:96:41:89:3a:2f:26:1a:80:4b:c8:12:9f:
                    7d:37:b6:0b:67:ed:f1:4f:a7:8e:e8:c7:48:04:65:
                    3a:64:19:6f:52:5f:e4:85:21:62:9d:da:a0:73:84:
                    39:96:6b:16:2e:0a:c2:8a:e6:0c:6d:9b:ca:f7:e5:
                    f1:04:82:0a:41:54:6c:e1:d7:70:57:28:ee:d4:1d:
                    f4:5b:90:43:7f:94:dd:e3:d0:07:74:7a:04:f2:72:
                    a8:36:b5:e9:36:54:d0:ca:d9:d9:0b:91:e0:f6:ab:
                    54:2c:87:15:e5:66:8b:cd:21:04:a9:be:17:94:1f:
                    b7:2c:3e:22:d5:0a:89:86:cd:5c:72:05:12:b2:f2:
                    b2:dc:12:74:02:2c:dc:80:4d:71:8c:56:b4:22:d1:
                    d1:78:48:c1:c9:66:27:c3:b3:a6:49:31:2c:4c:07:
                    af:23:58:de:b4:fb:58:45:83:93:d1:96:f2:70:a9:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:84:27:2C:D7:20:A7:DA:F5:CA:13:36:68:7E:D2:45:AF:10:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/4d54be06-9cf7-3fba-ad66-e5a146d4a627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f676::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:68:f5:97:2c:b5:23:42:f1:ed:93:49:29:63:17:35:ca:f5:
         c1:36:91:49:30:76:d5:89:62:05:57:db:8d:7f:66:91:04:6c:
         b6:24:a6:8c:be:81:91:ad:43:39:c6:70:df:c9:fd:6f:df:7f:
         3f:90:ea:6e:80:15:4a:49:c7:7e:74:6f:f9:db:f6:e9:e7:1d:
         b8:3c:d2:e5:cf:f5:19:35:51:e5:8d:05:f1:6a:2c:3f:15:99:
         b0:f3:30:8d:21:e2:cd:ce:98:63:03:04:c6:39:31:ef:6e:4a:
         46:85:d6:96:5b:13:a3:53:49:32:56:b4:92:fd:e0:5b:45:a4:
         9b:e5:fa:01:ce:67:b9:cb:3f:85:2c:af:2d:31:4e:aa:aa:56:
         56:5e:d9:48:5f:af:cf:11:26:cd:e4:70:90:10:de:09:89:6f:
         34:be:79:eb:60:5e:b2:f5:63:56:6f:b2:69:2c:7b:43:ba:3b:
         65:ca:37:6d:5a:c8:2d:97:0c:37:b8:0f:44:c5:f5:1e:e4:c0:
         a1:c2:e7:ac:5e:6e:f4:0f:cb:66:89:ff:9e:60:02:a5:85:1c:
         df:6f:d7:96:12:a2:cd:df:2a:98:64:8d:a3:76:be:62:ed:83:
         de:e3:52:f3:3b:e4:0f:8f:96:06:3a:ab:68:5e:12:a7:d6:6f:
         b4:59:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:41 2025 by rpki-client