Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa
File:                     432bb520-6b1c-359c-8425-18dca6b8785b.roa (raw, json)
Hash identifier:          3jUwIDFJb8Chh+l/5PDzoqq6KUtlbu4kUeoMNP0hp+c=
Subject key identifier:   5C:E0:37:CA:53:7A:EC:58:63:97:44:04:CE:7D:57:02:9F:1B:A2:92
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F43285849C63A27BC9D7244A09D271540
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa
Signing time:             Wed 07 May 2025 13:01:01 +0000
ROA not before:           Wed 07 May 2025 13:01:01 +0000
ROA not after:            Tue 05 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        2602:f84e::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:3a:27:bc:9d:72:44:a0:9d:27:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: May  7 13:01:01 2025 GMT
            Not After : Aug  5 13:01:01 2025 GMT
        Subject: CN=6c146a50-b452-45e1-b379-518cf4b299a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:10:42:9c:ab:69:18:2b:ad:a6:67:c3:f8:26:
                    86:a2:d6:92:9e:6d:7b:6e:74:61:1d:2e:0f:a9:e1:
                    8f:1f:59:e6:d2:35:4c:e2:98:07:c8:44:e6:0b:7d:
                    3d:57:d9:16:24:b9:62:17:62:26:37:37:37:6b:3c:
                    2b:59:9d:a2:cc:54:1b:c9:ee:a4:56:3c:69:db:3a:
                    a6:c4:b6:4e:2c:4f:4b:42:ef:18:c5:14:a2:47:3e:
                    7e:f7:dd:1c:39:28:47:80:2c:48:51:01:d7:09:22:
                    49:03:e6:4b:04:63:eb:cb:24:91:3a:e3:a9:7f:6d:
                    8c:fb:5d:e0:c7:11:07:dd:fd:f3:8e:b9:c6:45:c0:
                    f0:91:b7:ae:da:b5:50:d3:d0:95:26:a8:59:68:df:
                    a4:3a:90:73:85:4d:05:c9:96:80:e2:b2:cb:52:38:
                    23:d8:6e:a7:d2:7c:d1:77:08:95:9d:9c:92:f6:06:
                    94:60:f3:d0:65:be:af:88:f1:bf:d4:53:16:f9:78:
                    42:da:15:47:e6:c0:31:dc:e3:ad:dd:0f:a0:30:35:
                    9d:5c:16:0f:5a:c4:e4:f5:85:ee:47:d7:b0:b9:0d:
                    bf:73:dc:57:55:3e:27:a8:be:4a:f2:d4:53:42:cc:
                    20:9c:60:3e:78:ac:fe:d9:d9:e8:40:72:67:d5:c6:
                    2a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E0:37:CA:53:7A:EC:58:63:97:44:04:CE:7D:57:02:9F:1B:A2:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/432bb520-6b1c-359c-8425-18dca6b8785b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:32:7e:e7:ba:d3:1d:20:d3:f9:2c:8c:52:36:d4:06:98:
         61:ce:9f:32:1f:76:79:c7:0e:49:da:28:2e:90:5a:f9:2b:8c:
         85:c5:c2:5a:8e:1b:c3:55:a5:b6:3c:96:b7:56:ce:66:98:8d:
         a8:6f:f8:4d:08:8e:4b:fb:f6:77:86:96:03:bf:5e:64:e2:e7:
         c6:31:d2:49:4a:86:e1:66:5a:68:58:c9:b7:46:6b:d7:bd:1b:
         af:9b:57:e6:97:95:45:95:ba:80:ec:09:65:28:23:96:5b:3c:
         e4:f2:6b:10:5c:1f:5c:8f:ae:c3:6a:e2:97:0a:a6:71:1b:8c:
         12:62:d3:79:0d:cd:07:17:ad:e7:0b:69:13:61:61:64:d9:08:
         bc:98:ce:b2:fc:08:12:6b:70:56:64:6a:fa:b2:61:fc:cc:a0:
         e9:e9:41:89:4c:01:25:43:f4:a5:c2:b3:78:02:c2:c6:dd:85:
         49:0c:93:3c:97:9b:93:14:f4:1f:84:5e:15:3d:fc:99:7f:41:
         a2:fc:b0:25:e2:a9:e3:bd:0c:7f:43:80:63:8c:7f:5d:ef:8b:
         fe:c2:1a:2b:df:79:a7:88:60:ac:a9:5f:23:08:39:1b:3d:c7:
         32:92:77:a5:ce:b1:97:10:99:2e:cf:b7:ba:01:d7:99:fb:fb:
         37:fb:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:44:20 2025 by rpki-client