Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fa0cc3a5-8637-3f7f-88bd-d5bb9891ca95.roa
File:                     fa0cc3a5-8637-3f7f-88bd-d5bb9891ca95.roa (raw, json)
Hash identifier:          xcaIVAdwlkWaFZcJOud3LtEwmyiFAVnQSQjagW7Mt3k=
Subject key identifier:   99:A5:4B:76:B6:9E:B8:AA:A8:24:BC:63:E9:E2:2E:22:E2:AC:EE:01
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F432858497291399CFB04C204378B9300
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fa0cc3a5-8637-3f7f-88bd-d5bb9891ca95.roa
Signing time:             Mon 07 Apr 2025 13:48:35 +0000
ROA not before:           Mon 07 Apr 2025 13:48:35 +0000
ROA not after:            Sun 06 Jul 2025 13:48:35 +0000
asID:                     396982
IP address blocks:        2602:f742:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:91:39:9c:fb:04:c2:04:37:8b:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Apr  7 13:48:35 2025 GMT
            Not After : Jul  6 13:48:35 2025 GMT
        Subject: CN=77433979-0b23-4f42-a31e-fc33f2486e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:99:e5:01:e5:0b:37:76:7a:3b:ae:cf:01:
                    1e:76:dd:e1:54:fd:91:e1:2b:90:07:2f:77:df:e5:
                    ac:98:2c:b6:3c:ce:da:a0:5e:03:3c:00:3a:67:02:
                    29:97:2a:95:fc:4c:8d:59:62:e5:36:f1:02:ed:ad:
                    a6:2c:db:8b:0a:c8:18:73:3a:88:c1:5b:02:3f:06:
                    38:20:87:7e:3e:01:d9:c7:46:9e:fb:b8:81:1b:45:
                    fb:4d:20:4e:70:18:d6:68:9c:f5:97:57:2a:a7:06:
                    6b:ba:60:d1:97:46:8a:0d:cb:42:33:b9:2d:8a:c7:
                    d0:6a:c6:70:06:17:60:d2:70:6a:99:65:cb:9e:9c:
                    3a:70:e3:c8:15:ac:6d:fb:14:9c:80:94:54:f1:45:
                    83:ba:4a:e0:53:b7:e1:f9:e3:9c:3a:94:00:27:3d:
                    fd:40:01:ee:83:49:4d:21:4c:12:04:67:e6:d4:ce:
                    a7:e3:af:50:a5:81:ff:0e:68:05:d4:02:b0:a2:c0:
                    64:5b:c0:a7:c3:f0:41:db:62:ce:34:41:9d:42:71:
                    ff:e7:3b:b1:36:05:00:db:10:20:31:17:e8:fa:6e:
                    2a:1f:6a:c9:39:7e:c6:fc:26:d8:9c:1a:bf:ad:b0:
                    8c:e8:af:b9:8c:f4:fc:17:78:ca:62:5d:c7:16:a1:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:4B:76:B6:9E:B8:AA:A8:24:BC:63:E9:E2:2E:22:E2:AC:EE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fa0cc3a5-8637-3f7f-88bd-d5bb9891ca95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:0c:54:37:2c:af:89:b5:ea:52:8a:22:47:29:bc:28:42:
         8c:15:eb:f8:02:72:39:39:3f:e1:88:b6:ca:68:38:fb:cd:50:
         aa:c8:0a:2b:1b:f6:31:02:6b:9b:26:80:7f:f0:d1:ee:ef:a8:
         a3:73:ab:07:cc:35:ca:34:dd:9b:0e:de:4d:0c:33:01:4a:41:
         43:82:63:ec:43:c3:3c:b0:fb:e7:a7:0d:a9:6d:02:51:92:98:
         44:b1:4f:e1:82:ae:bc:cf:68:7b:11:7f:42:04:c6:69:09:81:
         e1:ac:ad:19:ae:ee:66:6d:56:80:31:3e:a1:e8:4a:6e:19:9b:
         47:d3:6c:00:ee:e6:2b:7d:00:ca:b2:8b:db:99:c7:fb:cb:a0:
         ff:c9:ff:a2:b5:41:83:4d:a4:01:19:74:3d:74:ad:04:aa:f5:
         09:c4:87:61:b8:53:b9:0a:a3:60:90:f3:45:74:08:c0:ae:a0:
         2c:16:ff:e5:a3:4b:da:10:24:2e:c7:f3:9c:cb:f7:da:ea:f0:
         f4:74:51:7b:4a:66:59:1d:74:9b:ab:5b:36:88:52:85:cc:ff:
         60:30:12:5c:95:fd:99:9e:cd:3a:a6:ed:db:1a:0a:20:b1:67:
         b3:dc:35:3b:d1:aa:1a:8f:87:c0:29:c1:c1:b5:56:44:35:72:
         a2:ed:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:53:16 2025 by rpki-client