Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa
File:                     4df80e12-1fe6-3764-926c-c35dada42f64.roa (raw, json)
Hash identifier:          WxUmgfa+l4n4utzPpMPGmrGjU5E3b5yxe7uO6GlTIaY=
Subject key identifier:   36:9E:36:89:BF:D5:82:D1:AA:42:0F:B1:B4:F6:52:5F:F3:E6:17:62
Certificate issuer:       /CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2
Certificate serial:       010D0C9F43285849EEB50421CC8A48F737C87280
Authority key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     401441
IP address blocks:        2602:f7b2::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:04:21:cc:8a:48:f7:37:c8:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=492f2be8-7122-4167-9b1f-9a4495fcda96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:95:59:42:3a:04:da:58:71:57:fd:9f:d4:
                    53:c4:53:e0:63:dc:79:a5:c6:86:db:29:a0:86:62:
                    0b:16:ab:3a:10:5e:19:6b:aa:38:f9:73:46:49:0d:
                    56:99:43:2e:7b:ca:c4:5b:e1:c5:55:f0:05:b8:36:
                    2b:a8:31:9a:b0:c6:8c:4a:30:57:7a:48:45:91:b8:
                    b5:ce:44:0f:08:71:35:d9:b1:56:50:c0:94:be:af:
                    dc:aa:31:aa:84:fc:4a:e4:b4:8d:61:06:5f:5f:8b:
                    1c:9c:75:63:fe:6b:30:8b:74:a8:1b:49:c9:16:0a:
                    e7:8f:d4:63:ad:e4:e7:26:df:2d:55:9e:63:49:f2:
                    f9:f7:0a:2f:47:5f:47:18:5b:a9:a8:d1:71:a2:7d:
                    7a:75:24:26:51:51:19:a8:ec:23:81:06:f9:22:e0:
                    ed:e1:b9:78:b9:74:f5:40:b1:24:ea:5c:c6:29:46:
                    f8:48:a1:bd:cc:80:10:bb:62:9b:78:ed:b9:32:0e:
                    be:e0:c4:f5:85:0b:1f:a6:1c:ee:bb:47:de:e6:be:
                    ab:19:0a:ef:5c:06:03:66:65:ad:78:98:a2:76:7c:
                    5e:b8:df:e6:4e:bd:be:b8:39:d9:6b:10:e7:02:3f:
                    d9:37:0e:27:e0:61:bc:a5:58:4c:2e:9a:3a:7d:c7:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:36:89:BF:D5:82:D1:AA:42:0F:B1:B4:F6:52:5F:F3:E6:17:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl

            X509v3 Authority Key Identifier:
                keyid:44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:68:12:9c:d4:ef:a9:6e:52:9d:91:53:96:04:6b:bd:6b:c0:
         9b:86:16:eb:b5:3a:a0:c5:62:05:a3:fa:af:03:ec:19:c0:80:
         f6:8c:1c:34:fc:c0:55:d9:79:a6:ca:f9:8c:b1:5d:56:49:aa:
         73:fa:bb:9f:51:e3:ff:06:7f:47:ad:97:d0:ee:bb:f3:18:96:
         46:c6:22:ba:21:8f:bc:9a:7a:29:22:10:7b:b5:af:a0:74:25:
         13:02:aa:a5:3c:aa:13:8d:60:06:87:e5:a7:a3:f0:95:4b:43:
         b2:03:ae:89:d6:91:03:74:7b:bd:b3:da:2b:46:7f:50:e0:47:
         be:b2:47:a4:4c:0f:4c:33:35:21:df:a9:eb:79:51:bb:c2:e3:
         f4:37:2b:84:64:c1:03:a8:78:03:73:4a:2a:eb:52:43:3d:ca:
         ab:3e:13:e4:ea:d5:f4:ee:91:fd:1b:94:db:75:c8:74:54:4d:
         44:cf:cd:5f:c5:e9:4a:b1:d3:45:38:13:be:65:35:f3:1f:a5:
         24:68:9b:0e:9a:92:dd:6b:c4:a9:cc:90:f7:5a:d1:55:d8:b9:
         46:d7:9d:9b:40:55:d2:c2:b6:13:35:86:49:b1:6b:20:00:29:
         8c:96:9f:2f:32:b2:c0:c4:da:68:a0:cc:0e:f3:5f:7d:6d:fd:
         8d:d5:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:21:45 2025 by rpki-client