Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/dcd0605b-316f-3636-9cb1-e986723b21cd.roa
File:                     dcd0605b-316f-3636-9cb1-e986723b21cd.roa (raw, json)
Hash identifier:          KOgqY+YpLx6NLwkQGvgE0EsLSdKtP6memptW6WzcrQc=
Subject key identifier:   21:0F:DD:23:25:2A:11:0A:2F:4A:F4:73:CD:8F:53:6F:68:23:5D:A7
Certificate issuer:       /CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
Certificate serial:       010D0C9F4328584A94D0DB065C5302E360131700
Authority key identifier: 96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/dcd0605b-316f-3636-9cb1-e986723b21cd.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     46998
IP address blocks:        2602:f938::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:db:06:5c:53:02:e3:60:13:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1b23d1-b26d-49f7-b9ce-c3896ad43722
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=4e3d08db-3c02-4798-bb0c-f85b6244914c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:a6:5a:64:90:13:11:fe:bb:69:83:88:10:
                    89:17:2c:7f:57:4b:e2:7f:4d:74:89:6a:54:97:ba:
                    57:87:59:45:c9:d0:1f:45:a8:2a:ca:19:8d:55:de:
                    39:5a:07:2b:9e:ff:60:0c:ac:4d:6e:2e:e0:1a:3b:
                    15:5b:98:c2:0e:aa:67:40:8f:56:03:59:36:35:e9:
                    fd:15:21:92:b4:90:c0:8e:f5:43:27:33:f9:cc:a5:
                    8b:f8:ce:a4:ba:06:1e:2c:be:27:ed:77:97:23:f4:
                    64:e2:20:b3:83:34:73:e5:ab:0e:cc:20:19:98:ea:
                    38:30:35:9a:aa:dd:2f:51:55:c1:24:dc:6f:b2:2f:
                    93:0a:02:15:ff:82:1f:7d:f3:c7:70:c9:66:53:21:
                    1b:28:87:38:66:81:a5:82:fd:7b:45:69:0f:ef:0d:
                    be:1e:ba:45:69:4c:b8:50:8e:9b:9a:cf:f2:57:09:
                    2f:41:30:5a:57:30:d9:2a:56:3c:ba:39:5e:70:e4:
                    8f:18:bc:60:fb:9c:5c:39:85:6b:dd:c0:db:ce:57:
                    44:45:96:66:c1:06:af:46:9b:cf:ca:40:bc:62:2c:
                    8e:aa:0e:2e:21:65:c3:e8:0c:cf:a3:ca:c5:df:9b:
                    45:5e:f2:43:93:d6:3f:92:c0:b8:a5:86:a5:27:4b:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:DD:23:25:2A:11:0A:2F:4A:F4:73:CD:8F:53:6F:68:23:5D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/dcd0605b-316f-3636-9cb1-e986723b21cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.crl

            X509v3 Authority Key Identifier:
                keyid:96:0F:26:89:F2:51:79:24:F0:4C:07:35:B0:96:C9:43:4E:A7:1B:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7f1b23d1-b26d-49f7-b9ce-c3896ad43722.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f938::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:d6:e3:b8:b2:c0:0e:3a:1c:ac:ae:85:80:af:10:a1:d8:
         08:22:c6:ae:48:80:8c:72:28:41:15:9d:52:c5:19:a9:b3:8b:
         6d:3d:7c:7c:71:c3:79:21:a9:1a:70:8f:fe:d1:df:e3:44:3a:
         f2:ee:f2:36:96:73:31:91:d2:43:66:bb:22:99:c3:9a:8b:aa:
         e0:8b:3a:37:92:03:c6:88:6c:aa:52:c9:3f:61:57:3a:9c:54:
         9c:ad:83:e9:b4:80:8d:12:3f:8c:69:7e:87:bb:e4:0c:af:3c:
         44:14:d5:0c:3e:33:d6:86:f8:8e:2e:61:75:8f:0c:4d:da:bb:
         6c:87:f7:23:dd:0b:4d:6e:94:98:1a:c4:cb:fb:62:c0:76:87:
         16:d9:83:d8:47:61:16:cf:aa:f7:d8:ce:f5:05:71:a6:80:e2:
         f1:9c:d0:57:c8:01:bd:e8:7d:a1:6e:39:a2:88:5b:38:5b:15:
         bb:db:89:24:be:f6:f4:0a:9b:fc:d4:92:71:76:ff:db:00:11:
         48:c3:2f:83:e3:b3:c4:cc:5c:9e:7e:34:22:a7:29:95:50:27:
         98:f5:52:c3:79:1c:65:17:ff:94:78:68:30:76:6d:44:34:88:
         ab:f7:06:a8:64:86:46:2c:43:87:ff:2f:d5:0c:01:44:51:b4:
         9b:bb:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:15 2025 by rpki-client