Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/48387c4f-3dc8-3f50-a745-1d224af72be6.roa
File:                     48387c4f-3dc8-3f50-a745-1d224af72be6.roa (raw, json)
Hash identifier:          Dzw9tpqZ/zVYe0BvG1FOY/w6mQ4WbzjjlcvUQslE3bI=
Subject key identifier:   BD:53:F8:68:85:61:5E:10:7A:97:C5:52:3D:E7:B7:42:C3:B0:F9:6A
Certificate issuer:       /CN=5265026d-c5df-4885-bafa-081d26466504
Certificate serial:       010D0C9F4328584A2936CE7BE3F9C2522D150D80
Authority key identifier: D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/48387c4f-3dc8-3f50-a745-1d224af72be6.roa
Signing time:             Wed 11 Jun 2025 23:59:20 +0000
ROA not before:           Wed 11 Jun 2025 23:59:20 +0000
ROA not after:            Tue 09 Sep 2025 23:59:20 +0000
asID:                     400956
IP address blocks:        2602:f96b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:36:ce:7b:e3:f9:c2:52:2d:15:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5265026d-c5df-4885-bafa-081d26466504
        Validity
            Not Before: Jun 11 23:59:20 2025 GMT
            Not After : Sep  9 23:59:20 2025 GMT
        Subject: CN=c7c9e1ca-4cbf-4558-a3e7-18f7d9b320bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:12:1f:b6:da:20:64:4b:2c:ae:0e:9f:d2:80:
                    8c:46:bb:68:d9:d7:68:3d:2a:7c:f9:0b:93:af:6a:
                    01:f1:29:c8:77:c8:62:4e:6c:fc:cd:39:83:41:05:
                    0d:66:ac:c0:a6:e0:4b:07:22:28:fa:6f:9a:72:7f:
                    8a:9d:21:aa:47:e6:38:73:8e:15:75:65:8b:ae:41:
                    9e:8b:08:3a:af:53:4d:ce:1c:6e:2b:a2:35:13:bf:
                    f4:b3:d5:28:ca:4e:ce:71:38:9a:c0:5c:4d:01:cd:
                    97:6e:9d:9e:33:97:89:7b:68:94:75:49:b4:35:e0:
                    b9:a5:4a:27:dc:27:0c:a1:e3:42:bc:2a:55:de:5a:
                    17:5d:5c:28:3a:67:92:bf:cc:a5:64:32:06:54:12:
                    28:61:4e:93:99:5d:24:29:a1:aa:9b:34:32:cb:b3:
                    b0:42:f0:46:81:c9:78:ef:53:29:c1:69:5d:0f:0e:
                    d3:71:ab:09:00:31:8f:f1:a4:70:fb:46:0a:7b:99:
                    e0:b5:31:53:af:e5:8a:c1:e2:af:89:5d:20:32:f0:
                    59:9a:28:37:5d:f3:eb:0c:1c:e6:4b:8e:a3:6e:0e:
                    07:99:65:23:fa:18:20:62:e7:01:90:4a:f7:20:6f:
                    6e:c9:7d:44:89:28:9b:36:59:80:b9:cd:da:39:1e:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:53:F8:68:85:61:5E:10:7A:97:C5:52:3D:E7:B7:42:C3:B0:F9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/48387c4f-3dc8-3f50-a745-1d224af72be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504/5265026d-c5df-4885-bafa-081d26466504.crl

            X509v3 Authority Key Identifier:
                keyid:D4:10:0A:30:E0:C8:64:0F:80:BE:6F:95:F6:9A:BA:66:08:0E:E4:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5265026d-c5df-4885-bafa-081d26466504.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:68:c4:b5:72:38:c3:c1:51:41:d6:1a:7d:39:a7:12:89:59:
         b4:60:d2:73:3f:80:f1:6c:fc:e8:7a:70:3b:e0:00:07:6f:0d:
         21:4a:2c:d6:dd:0b:41:89:8e:f0:ef:90:68:49:9d:d0:05:84:
         27:89:4b:02:7f:eb:22:89:c2:37:93:02:93:2b:71:08:10:94:
         62:dd:19:9e:68:b2:14:6b:43:6f:07:26:80:3e:b0:85:08:31:
         40:e8:99:fa:7d:e0:69:cc:f7:99:60:0b:c2:22:16:74:83:fd:
         9a:8f:39:f5:21:b0:fc:05:6c:64:16:52:35:ff:ea:c0:80:f4:
         54:ba:78:d5:da:cf:10:1f:0a:c8:01:7d:7e:c2:32:27:2a:08:
         93:37:2f:7a:f4:a6:a2:1d:e0:29:ab:38:1c:44:d4:c2:3c:a9:
         22:53:4a:e3:f6:64:62:74:c9:c4:0f:45:fc:eb:09:b7:fb:79:
         27:9d:83:c1:ce:d2:dd:e6:53:9f:3a:0e:75:67:75:27:a1:f9:
         cb:82:22:eb:71:e5:fd:32:f8:26:8e:ef:bd:b2:29:bc:bf:01:
         72:d4:2e:6a:aa:48:3b:d7:69:76:c4:dd:5a:8b:b7:6a:07:3c:
         02:c4:61:e0:53:06:7f:7d:72:40:a7:62:bb:67:05:40:c5:05:
         b1:c8:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:31:58 2025 by rpki-client