Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa
File:                     c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa (raw, json)
Hash identifier:          0Mguq0+NGhvFz7aU0R5fDxKHp7cb/9/zjS+ulPSeYMI=
Subject key identifier:   2B:9D:A6:65:D6:A9:70:E2:D4:27:A1:E5:09:C2:AE:37:C8:72:74:F4
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F43285849955F21525B08FB9214D50800
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     16725
IP address blocks:        2602:fa68::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:21:52:5b:08:fb:92:14:d5:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=eb415885-ae7a-4eb3-ba14-4a98edbc2d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:32:25:8e:f3:32:e9:45:dd:49:b3:f9:a6:
                    3b:9f:1f:da:0d:be:ee:24:5e:8f:ef:46:e5:ef:40:
                    19:e7:ca:6b:28:d9:8e:e8:59:0f:6b:92:37:c6:fe:
                    05:62:31:f4:ee:5f:dd:87:4d:10:dd:a2:cc:6e:7d:
                    17:1a:8c:fc:a7:bf:95:96:77:8f:af:4e:70:87:95:
                    3e:bd:66:95:46:e4:07:17:b0:08:8e:d7:05:d3:ad:
                    d7:77:8c:e0:7f:80:86:63:29:f5:30:d6:0d:38:2b:
                    b0:34:0d:6e:aa:04:2a:3d:2f:2a:36:18:73:c3:81:
                    74:d3:01:92:1f:ae:6d:c4:90:55:c8:17:aa:24:fc:
                    de:4a:24:37:3e:1a:3e:9a:fc:f6:7a:e5:65:b5:b4:
                    a0:64:34:79:04:d0:04:7a:b3:a9:61:92:63:a4:fd:
                    83:07:d7:5c:e5:8d:39:57:e3:18:1f:95:be:10:11:
                    84:be:3e:c7:94:c5:27:5e:36:d3:26:cc:71:8f:e5:
                    98:3a:db:4a:cd:bd:7a:bd:b6:6c:51:50:36:d0:cc:
                    6e:52:8a:9c:c6:23:70:73:0e:42:7a:1a:0e:6f:58:
                    72:29:32:bd:39:3c:af:2b:46:d5:44:61:05:87:4b:
                    53:a4:30:0d:99:45:5f:da:e3:9a:a8:9b:a7:2e:3d:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:A6:65:D6:A9:70:E2:D4:27:A1:E5:09:C2:AE:37:C8:72:74:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/c2da9bcc-494d-3e68-93b5-47a329f4d38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa68::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:b7:6e:d6:76:eb:af:53:ee:43:8d:46:47:28:7a:d9:bd:
         17:22:94:a4:b6:e8:ef:17:91:79:2a:a4:e0:91:52:ab:40:36:
         d4:fe:61:04:9f:81:5e:3e:cb:67:fc:c7:36:63:b5:75:7e:a3:
         2e:d5:af:82:b9:94:d5:f6:cc:aa:f7:f6:e6:64:12:84:bd:8f:
         ed:af:b7:72:85:e5:08:18:5a:4b:97:32:60:3b:90:d8:45:03:
         ae:1a:7b:8d:03:af:25:e5:44:0f:8d:79:31:ca:25:94:e2:56:
         f0:b1:9a:16:ef:c5:b6:ae:9e:9d:4d:44:e9:c4:7a:97:6c:ff:
         71:06:00:cd:9d:53:46:ef:5b:31:87:59:87:d1:45:5d:2b:c0:
         c9:fd:9c:59:c2:71:8c:09:6f:4d:eb:89:02:f9:4d:a6:96:59:
         e7:fb:23:83:13:dd:fa:bb:f6:3b:53:ab:b7:76:35:8b:55:30:
         74:92:5a:bc:fb:9c:a8:6a:af:e8:f9:93:69:4c:ab:d6:32:25:
         a1:97:3c:de:cf:69:98:0b:3e:f9:6c:57:94:de:b8:97:6a:ee:
         ac:20:56:27:ac:40:5e:9c:02:66:e8:a0:00:f7:e1:93:e8:f1:
         b1:ee:f2:48:dc:cb:f0:fe:c6:fa:9c:c2:ec:97:dc:db:a6:9a:
         94:1c:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:32 2025 by rpki-client