Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa
File:                     462c47a3-9cba-306f-bb61-46c2322b5348.roa (raw, json)
Hash identifier:          SOYmAG8IIE3Wpfq1lxsHknzcLWE+GTWrApoYLPR+RrI=
Subject key identifier:   A4:5C:1F:72:2A:99:77:D3:1B:55:65:5B:B4:95:78:D8:DE:D7:82:BA
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584AA2C6443454FC1A46F3DD7E80
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     63150
IP address blocks:        2602:f988:96::/48 maxlen: 48
                          2602:f988:97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:44:34:54:fc:1a:46:f3:dd:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=1ab2bd41-d669-46bc-8d72-48e5b0a4c601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:22:f1:1d:ab:92:bb:61:17:53:4f:6e:53:
                    c5:fe:1a:b4:43:5a:ab:2c:18:b2:d0:54:da:ff:b7:
                    3b:39:55:4e:3c:8f:aa:12:7d:d0:a5:67:db:1f:af:
                    84:3d:d3:96:7c:90:9c:78:68:5f:30:f7:0f:33:d7:
                    06:c8:65:c0:ab:3b:2b:36:ad:bb:48:f0:d0:a3:4b:
                    5a:f5:55:90:ba:79:bd:04:16:15:f6:b2:f4:8f:b2:
                    57:20:45:c0:cc:30:58:d7:b9:f5:d3:fb:08:88:2b:
                    75:54:b8:1d:8d:24:c8:1e:2b:d9:76:f9:14:37:19:
                    98:5b:2d:79:af:02:06:0d:83:88:99:54:5f:02:28:
                    9f:a9:0d:02:95:71:38:c3:9a:c8:5d:eb:6d:9d:02:
                    ca:58:d3:bf:9f:90:95:68:2b:56:9a:40:dc:b4:a3:
                    85:54:29:a8:34:d3:4c:1d:6d:7d:4c:74:ac:ab:c8:
                    19:20:6b:ba:cf:35:9b:3d:41:0f:0e:e6:7a:ef:83:
                    76:27:8f:e9:7f:bf:69:b3:2b:90:b3:3d:32:1b:f0:
                    d1:36:90:8c:e5:ab:84:ac:ec:64:a6:dd:89:89:03:
                    b1:80:c5:5a:f8:3d:e3:46:e1:6c:e1:7d:df:f5:36:
                    9c:be:0e:60:15:d2:0d:27:88:12:1a:f9:22:8e:26:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5C:1F:72:2A:99:77:D3:1B:55:65:5B:B4:95:78:D8:DE:D7:82:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:96::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:f8:f3:ab:48:68:89:ad:70:d0:b6:20:36:02:99:ab:72:
         41:e3:12:05:1e:d8:c6:44:7e:5e:8e:7d:8f:77:d3:d0:d3:ae:
         fe:5e:72:57:aa:38:54:c9:50:3f:e9:d0:a8:aa:71:68:2f:60:
         e3:dd:b4:dc:a4:a8:26:21:94:91:1c:8e:0f:41:6c:79:57:04:
         a9:bd:64:04:ff:2a:fc:cf:bc:97:23:78:6c:2b:f8:9a:f1:71:
         84:3a:09:62:5b:d7:6b:f1:3e:87:4c:1d:15:81:a6:0d:93:11:
         11:f3:ff:2c:0d:95:21:1c:33:0b:88:d6:4d:4a:7a:26:f7:dd:
         41:d7:16:63:c4:a3:1e:d4:82:9c:a8:b9:50:78:27:9a:c9:8e:
         1d:25:43:fb:4f:53:83:2c:24:d5:8f:f6:52:78:2a:4d:ad:98:
         0b:0a:35:7f:59:9a:a7:5b:99:55:85:6b:e4:0f:8f:d3:75:04:
         7c:cc:61:d5:45:63:41:7e:4e:78:99:05:82:e5:86:76:57:e8:
         7d:1b:8b:cc:9b:4f:d7:33:f8:12:9b:6c:42:7c:34:94:ab:48:
         3c:49:bf:75:47:fa:dd:e9:7a:0e:0c:e6:d5:0f:61:4b:42:4b:
         81:cd:96:f4:3e:20:76:6e:79:41:23:55:eb:62:16:ee:5c:b1:
         98:2d:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:12 2025 by rpki-client