Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/2c4b5640-c846-3ed1-b721-038ad4dc02ab.roa
File:                     2c4b5640-c846-3ed1-b721-038ad4dc02ab.roa (raw, json)
Hash identifier:          4eZ4IhNMN0bnQlv2VXIJZJrmXtmo0OrLVLOhQBR1e7I=
Subject key identifier:   37:40:8D:22:3E:43:A3:D6:0E:EE:6B:B5:2E:DA:46:2A:DF:B2:00:F5
Certificate issuer:       /CN=fc3a6068-95db-4d68-86b3-bb81053e8875
Certificate serial:       010D0C9F4328584A225ACA0C26114DD08472EB00
Authority key identifier: 14:37:69:0F:9B:E6:27:2E:B1:FC:3C:BE:03:E1:CD:68:47:6C:BB:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/2c4b5640-c846-3ed1-b721-038ad4dc02ab.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     401541
IP address blocks:        2602:f75a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ca:0c:26:11:4d:d0:84:72:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3a6068-95db-4d68-86b3-bb81053e8875
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=33827622-f1ee-4da4-b893-c78020bc1dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:58:80:94:ce:02:32:ad:96:a1:d5:df:06:
                    5d:a0:ca:00:bc:a7:62:43:ae:97:64:c1:4c:ed:09:
                    be:fe:09:1b:a9:a3:7d:fb:08:44:4d:bd:2e:6b:e9:
                    59:9b:30:b5:98:87:fb:f9:a1:b6:b4:94:90:63:a3:
                    be:06:58:7a:31:08:c3:13:b3:f6:20:12:35:f9:11:
                    85:e0:69:36:2c:8b:a1:d9:f3:a3:ea:71:df:b2:54:
                    4c:9e:01:35:73:a1:fd:b7:64:cb:c6:c0:01:0e:11:
                    ae:96:ed:99:0f:2c:96:97:f1:d9:eb:85:bf:85:0a:
                    8f:a0:a7:28:29:15:3d:ba:d6:1a:a8:1f:70:cf:f0:
                    e6:d8:d6:66:49:a5:52:9c:51:bd:05:03:ed:f1:49:
                    57:04:2c:58:fa:ed:f3:d9:45:a1:71:3b:58:c6:58:
                    f2:d6:c9:95:20:b3:90:4c:b6:57:91:89:a6:a0:1a:
                    79:cf:9f:d5:9e:10:bd:41:4d:8c:f3:2b:a0:ab:e7:
                    41:3e:38:02:eb:45:ec:cd:0b:c3:31:6b:7c:2a:91:
                    01:00:12:08:89:06:26:4a:b8:a8:89:a5:f7:8e:a0:
                    ec:3a:4d:6a:ef:8a:24:02:61:37:38:b2:19:12:87:
                    37:90:f5:51:a9:b3:e4:dd:1c:0e:0b:b5:ee:e9:25:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:8D:22:3E:43:A3:D6:0E:EE:6B:B5:2E:DA:46:2A:DF:B2:00:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/2c4b5640-c846-3ed1-b721-038ad4dc02ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875/fc3a6068-95db-4d68-86b3-bb81053e8875.crl

            X509v3 Authority Key Identifier:
                keyid:14:37:69:0F:9B:E6:27:2E:B1:FC:3C:BE:03:E1:CD:68:47:6C:BB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fc3a6068-95db-4d68-86b3-bb81053e8875.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:52:81:f0:0b:ba:e8:fd:40:f0:d2:d5:6c:7a:fa:08:16:
         22:14:f0:1f:e8:c3:a8:b2:be:ac:65:d6:72:fd:7a:9c:4c:17:
         35:49:93:ee:e2:a5:ea:24:fb:0f:dd:58:b4:c6:df:c5:c4:c1:
         a8:17:1e:94:76:b6:1c:6b:6f:50:0c:88:11:c4:ae:d4:b1:b4:
         bc:30:bd:df:8a:2b:ac:be:79:18:84:48:0f:33:98:f0:ad:f9:
         70:8c:ed:71:4a:22:38:0c:bb:1e:05:93:71:18:91:7d:d0:6b:
         f2:85:f7:c0:65:59:7e:6d:9e:d8:3a:d0:5d:46:4d:79:08:07:
         69:c3:0e:e7:a2:2f:58:01:3f:45:a5:1f:ef:fd:4d:10:9e:d0:
         30:4b:e3:ff:22:15:52:c8:92:21:95:e7:a2:28:a0:2a:f9:f8:
         af:25:27:41:c5:00:94:27:86:13:c5:1e:95:14:19:13:0f:a3:
         c5:f8:07:5f:4a:86:dd:99:37:9d:2f:91:38:34:84:ef:c6:f2:
         03:14:25:14:9c:02:53:f4:e8:9a:f3:64:92:81:9d:f9:8b:55:
         fb:b7:3a:54:5d:8c:0d:78:e6:2c:2e:59:eb:4c:10:a9:92:1c:
         25:03:e8:d3:4f:bf:66:79:67:71:95:14:98:67:cc:35:46:da:
         9c:ff:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:59 2025 by rpki-client