Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa
File:                     8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa (raw, json)
Hash identifier:          dhlBT/pvL4bzNF4nGl62wJm3UksMzVB5uRqMntLDV5M=
Subject key identifier:   FB:F1:03:8D:80:33:60:86:F6:A1:B1:FC:39:91:58:BE:FA:70:36:8D
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4CA816617B8E8763FB800
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        2620:101:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:ca:81:66:17:b8:e8:76:3f:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=40a048ab-0f6c-4015-ad28-6dee7d3e2faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:07:de:c1:7f:f8:a2:ce:93:c8:44:a4:8d:
                    6d:5a:a6:e4:7b:94:b0:f8:bc:f9:3d:f6:c1:23:7d:
                    cf:94:86:73:c3:73:05:44:72:9b:c0:b6:40:b0:f2:
                    dd:d2:38:86:9c:47:77:85:3f:87:24:8f:ed:2c:e5:
                    ed:27:1a:53:35:bf:05:01:79:5c:8a:bc:ef:b7:fd:
                    32:8b:a6:aa:de:df:e4:26:a9:1e:a7:98:60:70:ed:
                    67:80:ab:76:f9:48:73:54:82:73:7c:8d:c1:e9:1f:
                    ed:6d:13:3c:4c:07:7d:9e:7d:b8:b7:23:18:46:71:
                    2c:af:68:8b:07:ce:cf:aa:37:0c:28:79:4f:de:26:
                    72:5d:f9:53:17:78:c6:a7:0d:77:81:fa:02:ea:d1:
                    78:c1:a2:91:f7:cc:f1:93:08:6f:32:ba:a4:8d:28:
                    1b:ea:0e:56:95:60:2a:72:ba:c2:6e:1f:d9:31:53:
                    ae:08:2e:b9:35:ad:92:df:6d:8c:97:c1:bd:66:29:
                    a8:4c:7b:46:3d:06:49:66:e6:b1:5e:c8:80:1e:1e:
                    84:b4:a3:eb:64:a1:50:bb:ef:f8:97:75:34:59:41:
                    38:b9:26:2c:00:f5:90:37:af:56:fb:40:9e:cf:61:
                    0b:f9:83:6a:34:5a:19:08:51:86:f1:98:0b:96:60:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F1:03:8D:80:33:60:86:F6:A1:B1:FC:39:91:58:BE:FA:70:36:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8ce9e6bb-ac36-3295-831a-00e3d103ebb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:a1:83:1f:9b:3b:de:3f:e0:3b:cc:5c:46:c5:fc:a1:a6:
         4e:69:0f:cd:7a:f8:32:d7:d4:97:2a:ec:8c:fb:76:44:5d:ea:
         9f:ca:2b:43:0c:0d:24:ac:18:8f:ec:bb:64:4c:d8:57:f0:e2:
         8a:bf:d5:85:58:fd:7c:43:26:be:99:ff:4f:4d:d7:d7:88:02:
         4b:13:4c:e0:94:3c:46:0d:fb:0d:11:8c:da:53:94:f3:a5:c3:
         5c:bd:ff:45:8f:78:44:15:12:6d:08:28:86:f1:2c:84:9d:40:
         39:6c:42:8d:3b:cb:2f:de:01:8e:e1:4b:61:89:e1:a7:5a:5a:
         d4:c9:17:0e:db:70:b5:79:34:be:32:a1:fb:7b:ed:f0:39:b6:
         fb:20:b2:28:68:ad:2e:5a:b1:e7:f0:10:34:68:c2:3f:fe:79:
         a6:16:15:64:f1:99:39:ae:e7:ce:2a:40:9e:67:64:db:c3:c3:
         56:5d:3f:0d:16:3d:e2:97:f4:05:f6:2d:d5:cb:e8:15:9b:b0:
         68:90:b9:ff:3f:51:b0:a8:57:5b:6f:ce:cc:0b:4c:a6:32:03:
         25:05:20:4d:09:a9:eb:f9:09:00:f3:d0:ac:c8:a6:e9:04:d2:
         b7:fd:61:6d:c7:b2:4d:e7:92:33:04:b2:60:b7:ae:51:23:90:
         d2:b2:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:53 2025 by rpki-client