Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
File:                     8afe2b44-aeed-3635-96f2-699b9e5360de.roa (raw, json)
Hash identifier:          jlIjhvs8rawvTd28uTbq3wMdwvGd6ATbuN+/5tkxeCw=
Subject key identifier:   4B:56:A2:9A:EC:C6:22:0C:0D:28:E6:74:6E:D5:00:A6:A7:5F:35:7D
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584AB11157B795365A68FEBFC080
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa
Signing time:             Wed 30 Jul 2025 15:53:47 +0000
ROA not before:           Wed 30 Jul 2025 15:53:47 +0000
ROA not after:            Tue 28 Oct 2025 15:53:47 +0000
asID:                     38047
IP address blocks:        2602:f83b:1886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b1:11:57:b7:95:36:5a:68:fe:bf:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 30 15:53:47 2025 GMT
            Not After : Oct 28 15:53:47 2025 GMT
        Subject: CN=c7661c7b-cb4e-4a7d-a34b-d0f7f7dc5391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:a9:0f:ad:b9:63:74:77:fb:27:13:25:cf:
                    21:ec:66:0b:52:1f:81:c2:9f:50:11:1d:aa:60:fa:
                    f9:c7:45:65:5c:a8:34:80:6d:87:cc:d0:6e:5a:aa:
                    5b:1a:07:93:e1:ff:68:78:cf:38:29:74:c6:ae:68:
                    eb:6b:f8:7a:6f:00:41:fe:f3:d0:12:61:f5:bb:74:
                    fc:9c:ca:5c:f0:11:3d:9e:92:55:b5:9c:c0:e1:33:
                    65:51:b3:4e:fb:7f:7d:7b:39:81:3f:ad:97:34:95:
                    8d:2c:42:3f:cf:db:11:ff:be:78:ae:18:ee:b6:f6:
                    1a:96:1b:cd:22:11:ed:19:c1:6a:b1:fb:17:4a:a6:
                    89:2d:94:e9:85:cc:ab:0f:d8:2d:78:58:6e:f5:c3:
                    44:97:d4:2c:19:35:f7:52:e7:cf:d2:c4:2d:4f:a6:
                    fa:e3:e6:97:d8:7d:17:c7:41:bc:0e:69:1a:d8:4b:
                    9a:78:fb:53:7c:e8:72:33:07:5e:4b:c6:50:9a:cd:
                    36:36:47:6b:86:9e:e4:e6:81:8a:3d:06:77:3d:b0:
                    2b:12:2d:01:e3:cf:f1:42:f6:97:2d:de:eb:79:92:
                    c5:75:65:ae:b9:f7:3c:63:e5:03:6d:d1:8e:54:36:
                    7c:be:99:1d:bd:bb:3e:22:6c:ae:c9:3d:cf:6c:9e:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:A2:9A:EC:C6:22:0C:0D:28:E6:74:6E:D5:00:A6:A7:5F:35:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/8afe2b44-aeed-3635-96f2-699b9e5360de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:45:a7:b2:97:ec:d4:ba:9d:ac:9a:c3:7a:f6:84:cb:6b:3a:
         f9:1a:9a:49:d0:66:31:de:30:c9:87:db:46:ef:0a:28:3d:28:
         45:73:79:72:0a:01:97:5e:f9:09:3a:bd:7e:3b:7d:23:ba:5d:
         d7:83:c2:11:d2:19:76:1f:41:45:e9:b9:f1:58:4d:83:7a:67:
         0f:91:24:e4:df:9f:05:fd:51:5d:cd:f6:87:d3:06:cf:d7:34:
         70:26:1d:b2:92:61:a1:af:69:33:a3:7e:9e:45:1b:9f:86:25:
         d2:de:48:82:28:9a:83:ed:fd:8a:55:01:aa:52:7a:c8:12:d0:
         6e:42:fd:71:8b:30:dd:34:77:a2:0c:cf:38:61:1d:d1:72:d9:
         fb:5b:4c:80:03:97:20:b3:96:07:ea:69:c9:14:56:0a:9d:9f:
         37:5a:d8:76:ac:85:b8:c4:fe:4e:21:d5:34:0c:2b:b1:22:5f:
         97:bc:6e:15:b7:e4:87:b2:04:d5:d3:c4:6a:8a:be:08:00:5b:
         47:96:10:83:b2:bd:77:a1:74:4c:42:ef:7c:50:f5:8d:a7:53:
         dd:cb:01:23:11:30:d0:76:90:91:8f:d0:d9:26:72:e6:62:73:
         1c:29:5b:84:7b:0e:f0:64:7a:3e:4e:41:bf:64:0e:ed:4f:b5:
         0d:1a:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:31 2025 by rpki-client