Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa
File:                     fb8d0fc3-7319-310c-b290-6c9692f998d9.roa (raw, json)
Hash identifier:          cbIATAaYpCVkOiCZRJBNCQaeGeJKZxT1SXkEYQUhPv8=
Subject key identifier:   78:C8:5A:13:B4:36:66:70:CB:C2:CC:CA:C8:1D:7F:51:9A:5F:68:C0
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F43285849D2CA1EDDFDE000F6C4422100
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        2602:f742:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:1e:dd:fd:e0:00:f6:c4:42:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=cb63e09f-139f-42f1-a79e-8caeba25483b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:92:47:21:50:f1:ea:ec:a8:8b:86:b9:d0:80:
                    97:cc:e2:b1:43:d0:ed:a2:37:52:ea:6a:97:6f:09:
                    1a:2a:8e:81:03:21:5d:05:3e:8f:48:92:ce:9a:08:
                    14:02:f5:af:e5:ec:cc:dc:a1:e2:3b:e4:98:b1:2f:
                    f3:5a:f7:bd:4c:75:0d:8b:96:9a:52:ed:38:88:d5:
                    1a:e7:2b:d6:63:6f:e5:75:5f:06:5f:98:cf:d3:e3:
                    b2:d0:e3:7c:37:86:83:62:fa:29:39:c7:77:46:d9:
                    a6:1a:dc:68:53:ee:17:d4:81:38:bc:1a:29:08:40:
                    58:c5:f1:73:4c:6a:6d:94:21:02:7f:8b:41:cb:d7:
                    6f:c1:84:5f:52:aa:74:72:94:8f:43:c0:9f:d8:3d:
                    f1:35:8b:94:14:44:ab:0c:74:6e:15:9c:e2:fe:c7:
                    25:11:4c:6c:cb:3c:5c:3d:7d:02:7c:08:cf:00:e9:
                    06:80:4d:e2:ca:83:22:18:4d:e0:08:d1:6c:c2:4a:
                    17:fd:73:76:cd:d2:50:a4:e8:0e:29:60:93:8a:7d:
                    da:ba:e7:9e:cd:15:12:2e:27:94:f4:86:2d:01:c4:
                    40:3d:36:74:6e:f4:d5:02:92:c2:d6:92:75:4c:fe:
                    85:df:8c:19:93:af:a5:0f:4d:46:bb:1b:f5:7d:95:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:5A:13:B4:36:66:70:CB:C2:CC:CA:C8:1D:7F:51:9A:5F:68:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/fb8d0fc3-7319-310c-b290-6c9692f998d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bc:55:fa:fa:45:cf:81:7c:c4:3e:1d:79:fc:24:bc:08:cf:
         59:0a:ef:1f:d3:f6:9e:de:f6:76:ec:9d:95:c8:48:e6:60:bc:
         c6:80:10:ed:2c:e9:b3:8a:74:c7:aa:bc:b8:4c:c0:12:87:48:
         5a:13:db:91:03:c7:af:95:8b:9d:11:49:76:0f:b7:66:3a:85:
         15:b1:6d:7c:15:81:32:05:32:e2:6d:ab:8b:49:58:cc:1d:ec:
         2b:ab:25:83:18:66:7d:45:e5:7c:02:62:2a:3a:0d:e6:b5:14:
         00:c5:dd:05:bb:61:56:5e:af:f7:22:b9:f4:90:d2:18:6a:c4:
         95:c5:17:4d:55:dd:f1:db:af:33:13:ba:3c:41:9b:05:95:a5:
         35:42:5d:8c:c0:8f:d5:db:07:82:36:69:db:d2:87:2d:98:75:
         cc:af:75:7c:94:91:a2:39:cb:eb:7e:f7:67:44:4e:91:2a:5e:
         d6:3f:b2:4f:b9:63:e4:b8:0c:16:d9:57:47:3b:d4:c6:2b:ea:
         30:25:21:11:3d:fc:8f:2e:4d:76:bd:7e:b5:b7:c0:16:55:91:
         d5:b2:d9:0b:9d:16:03:6a:d0:4c:28:17:9d:fe:75:0d:b2:4d:
         b1:11:7c:1e:cd:5b:b3:2d:a9:0b:2a:7f:2e:d7:84:b8:7d:d6:
         07:39:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:11 2025 by rpki-client