Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa
File:                     8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa (raw, json)
Hash identifier:          de25f7qIWwd0RmkLsuTWN4a0uryNyP5T0t8cDH0NLL8=
Subject key identifier:   FA:C2:8F:C8:92:1F:A1:96:6D:94:EC:B1:62:84:E7:D9:12:23:F8:55
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F43285849CBCF8F5AECBE4A81D2950880
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     7782
IP address blocks:        2602:233::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8f:5a:ec:be:4a:81:d2:95:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=5d569d5f-40d8-44db-b833-a7ae58d48c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:9e:26:6d:87:68:76:06:bd:42:67:35:e0:
                    dd:12:4d:08:ee:7b:70:a6:09:ff:af:aa:f2:54:5e:
                    42:aa:10:81:17:1f:a5:85:b4:45:45:fc:a8:6e:38:
                    a2:94:00:3b:35:66:71:d3:5e:ca:0d:ef:7f:82:c5:
                    9b:ae:6e:66:7a:89:50:6d:d7:6a:31:02:11:e3:7c:
                    5d:c6:fc:6a:b2:60:4e:da:42:0a:9a:4f:d6:ce:f9:
                    0b:b6:eb:72:71:36:bc:31:ab:8e:53:c3:25:ef:bc:
                    67:af:6d:77:19:ea:b3:9e:7d:6b:7a:20:21:93:9f:
                    2c:22:01:e3:ae:53:ba:70:c0:61:ca:72:04:75:29:
                    bb:a3:e4:15:03:74:31:46:1d:c0:3b:e4:82:35:51:
                    35:ce:e6:86:08:e9:2f:6e:24:57:f1:d8:31:46:4d:
                    1c:f8:96:e6:74:36:95:40:6a:dc:4a:87:76:03:42:
                    e4:70:64:88:5c:59:56:83:56:58:7e:e6:01:04:97:
                    ce:80:76:19:f8:9a:a7:18:58:a4:ff:f8:b0:15:76:
                    eb:1b:e5:d3:c9:0f:11:62:9e:17:48:43:f9:43:c8:
                    0b:48:dd:ca:7a:1c:de:c4:a3:76:f8:8e:e8:f0:ea:
                    16:b7:0e:a6:9d:15:3d:4f:da:dd:e5:7c:e2:28:4c:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:8F:C8:92:1F:A1:96:6D:94:EC:B1:62:84:E7:D9:12:23:F8:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8ca3a1b2-d0e6-3602-8666-58a0f4e3a51f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:233::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:ec:15:33:9d:11:40:1c:dc:6a:62:d2:7a:a3:af:59:df:
         9c:60:10:3a:93:95:69:f2:33:0b:34:f6:90:6b:76:f9:80:03:
         f0:12:db:a4:3b:d2:9d:bf:f6:18:f8:b4:51:23:62:e8:ae:7a:
         1b:d4:df:bc:82:2a:59:72:97:be:6e:2c:7b:02:8d:7e:66:4f:
         76:41:ff:5f:8c:04:73:9b:b1:cb:fe:7b:53:76:49:a6:4b:67:
         8c:db:fe:4e:84:bf:bf:62:52:b2:d4:c1:c4:24:6e:3b:5d:32:
         d9:7c:e9:6b:5f:7e:da:49:14:e0:fb:fa:fb:03:7f:8f:84:c9:
         62:a2:16:04:ea:a2:58:e9:e9:7d:15:05:1d:e0:ea:ac:1e:d0:
         dd:ec:a7:8d:e4:89:a6:a0:f1:df:94:dc:e6:ab:be:a0:4f:49:
         d6:eb:cd:b0:20:2d:6e:16:b4:a1:44:9b:0b:14:a3:66:95:1c:
         41:eb:5a:c5:0d:27:5e:14:5d:26:5e:9f:5b:76:8d:2d:53:e9:
         2a:28:cb:6e:a7:00:68:ed:a2:7c:7f:81:b6:14:66:74:91:3c:
         d3:04:eb:02:46:2f:a7:bd:bb:a0:bc:e6:b4:33:25:7b:b3:f0:
         9d:98:10:62:9d:53:5f:a8:62:37:0c:8c:4b:70:f0:f8:71:3c:
         0d:3d:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:34:56 2025 by rpki-client