Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa
File:                     f3704f69-4ad0-3528-96df-98754e1ccfd4.roa (raw, json)
Hash identifier:          N7Psrke3oATJQwdE0tXEbFZe6NTF9tmj4sIpNy1UYmY=
Subject key identifier:   87:01:44:7E:7D:F5:68:9F:94:FB:B6:D2:9C:DF:AB:22:B5:6B:FC:EF
Certificate issuer:       /CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
Certificate serial:       010D0C9F4328584A20F54F7C42DBF0125B992E60
Authority key identifier: 41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     33360
IP address blocks:        2602:fe78::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4f:7c:42:db:f0:12:5b:99:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=bc745ed8-7796-4827-8086-1160db9bb488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:13:85:4d:c3:6f:3c:eb:9c:4e:27:a3:4e:
                    e8:00:b5:5c:89:78:43:14:1a:10:cf:8b:34:c9:a6:
                    ba:ab:31:bf:2a:9e:ae:fd:24:d9:cf:3f:ad:52:6c:
                    95:4e:fe:6a:bc:97:b9:31:2f:85:a6:fb:1d:05:26:
                    ba:e9:92:5e:a9:3d:a4:42:c9:fe:55:0e:59:c6:f7:
                    6d:bf:b7:59:90:a4:a6:b6:bf:41:c9:f1:61:69:19:
                    9e:b5:d1:77:14:c7:cb:99:e8:62:82:87:f8:00:8d:
                    ae:80:08:4c:7c:0f:e7:f9:56:09:79:cf:5d:6c:0b:
                    c4:a0:7a:1d:68:0c:03:b3:18:03:2e:e3:cd:88:f0:
                    92:c5:da:31:fd:52:00:3c:a1:ad:c6:1c:29:18:66:
                    6c:47:6a:53:20:31:0f:6b:64:68:df:2b:76:12:cb:
                    07:cd:c2:68:fe:97:08:b4:f6:01:e8:45:91:80:c5:
                    66:f6:5a:d5:b1:80:26:2c:28:da:4d:4c:e9:40:c5:
                    69:73:c4:43:b2:81:e3:2a:61:0c:c3:8f:35:48:45:
                    0a:a5:9a:1f:92:18:46:29:c2:3c:bd:94:d2:d3:e3:
                    b0:d8:98:9a:5b:48:ff:59:3d:48:59:8f:c3:f9:1d:
                    81:8d:65:d9:73:b4:c5:bf:df:56:18:43:55:22:c0:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:44:7E:7D:F5:68:9F:94:FB:B6:D2:9C:DF:AB:22:B5:6B:FC:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/f3704f69-4ad0-3528-96df-98754e1ccfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.crl

            X509v3 Authority Key Identifier:
                keyid:41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe78::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:02:25:39:95:94:43:b3:92:25:39:87:10:88:28:83:5e:
         ba:7b:31:25:c1:fd:da:cf:31:87:65:98:97:85:e4:c8:d8:b4:
         d5:9c:12:84:b6:72:da:6c:f1:d2:06:4f:fb:28:82:2f:38:5f:
         e4:10:4d:17:5e:14:10:cc:6c:93:a9:ce:61:b0:61:e3:da:31:
         6b:cf:9b:3b:3b:08:1b:2a:9a:d5:f1:db:d5:a3:86:ee:af:db:
         b6:46:66:36:fd:19:3f:d2:92:ab:f7:78:6e:66:bc:33:66:18:
         c8:0d:0d:4d:65:b9:c2:b9:2d:fd:b0:b3:13:bb:dd:76:5c:03:
         97:27:bf:dc:13:8b:ad:02:54:31:15:7f:99:42:1b:70:d5:56:
         eb:21:70:32:35:56:87:42:71:41:69:5a:c7:48:9c:71:4f:3b:
         fe:9f:a1:7b:5f:61:62:e0:a4:29:ff:a8:67:38:44:47:f9:b6:
         14:42:cd:67:aa:44:91:26:ff:36:b0:1b:bd:0e:17:d9:09:18:
         2c:1b:61:fd:73:a6:31:1d:48:3d:4b:d5:03:f8:5b:56:9a:1f:
         cd:b2:ca:54:be:cd:05:a1:24:c4:6a:6f:32:51:3f:c0:89:92:
         6f:82:5a:34:3a:9a:59:75:a7:d2:06:d5:21:37:c7:fd:b8:99:
         07:a6:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:10 2025 by rpki-client