Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa
File:                     c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa (raw, json)
Hash identifier:          q8TWPJ9lsBJ6uO1k20+p0554ljDzQQ15SuEIglcMhLE=
Subject key identifier:   51:2F:D2:21:72:CD:B5:6E:EA:51:81:06:9F:CC:0F:FF:71:F2:B4:E0
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584A9E961F0950E59892EADA4F80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     38047
IP address blocks:        2602:f83b:886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1f:09:50:e5:98:92:ea:da:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ffcc4d1e-4a17-4fe7-97ab-f1e169da8491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:43:c7:90:be:d6:03:bd:2c:0d:f7:66:17:
                    23:4f:c7:85:ce:aa:63:f3:6a:aa:be:2f:17:ab:00:
                    39:c5:54:64:1b:80:64:2e:40:35:75:0b:4d:91:e8:
                    b3:03:cf:12:13:02:99:71:1d:75:86:76:a0:f8:1d:
                    a7:a5:c6:d3:08:d3:f1:c5:84:35:61:8b:f8:a2:ba:
                    a6:53:b7:2d:f0:8e:be:b7:07:c7:14:5b:a7:7a:59:
                    31:35:1d:af:c0:82:28:91:47:79:84:20:df:c3:c4:
                    aa:3b:3f:f5:74:61:4c:6a:70:57:27:b9:f4:f8:5e:
                    ac:d7:79:31:79:a1:fa:9d:cf:02:82:d2:56:df:b2:
                    57:fd:52:7d:81:4e:39:c6:5f:ac:6a:1e:79:6a:3a:
                    f5:4d:47:53:35:11:30:70:0f:fa:79:a8:da:33:57:
                    42:3e:f5:90:aa:4f:fd:e3:6b:06:9f:f5:59:5d:f3:
                    51:2f:8b:d3:d5:91:f9:4c:97:fc:9a:e5:5e:2e:8a:
                    17:79:69:a8:dc:28:43:ba:f4:18:49:5f:c1:a0:17:
                    a7:c0:d9:3c:ce:59:00:4e:4a:da:45:5d:44:88:41:
                    b0:e6:0f:e3:16:97:56:e0:57:e8:6e:6a:da:4f:b7:
                    8d:1c:1b:d4:50:4b:51:9f:63:f0:d6:c6:7e:38:9d:
                    5e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:D2:21:72:CD:B5:6E:EA:51:81:06:9F:CC:0F:FF:71:F2:B4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:77:39:76:df:0c:67:eb:b9:54:0e:e7:2a:8e:bd:26:77:41:
         ff:37:00:e8:50:08:9d:64:ba:2e:25:91:a5:a2:90:2b:2c:06:
         aa:19:18:ee:d4:b2:c7:e0:51:b7:66:98:f0:e0:25:ea:c2:14:
         f7:e8:28:30:fa:97:ac:45:45:e8:0c:07:d0:10:b8:6a:94:6d:
         3e:a6:48:ca:7f:bd:5e:c8:c8:5f:31:7f:a1:8f:fd:ad:31:c5:
         00:96:1a:27:cd:b7:b3:f2:27:76:ca:6e:9e:bf:ac:0a:b8:e1:
         6a:90:e5:29:77:3c:35:a4:03:81:ba:11:e3:92:ad:7f:99:be:
         c1:20:cf:1a:28:5b:41:33:16:95:5e:d2:16:4a:34:d9:73:71:
         af:10:65:52:9a:a9:de:6a:e0:c1:73:7b:e3:20:2c:bd:00:1c:
         32:bc:48:e8:c4:38:a6:4a:a5:d4:f6:c4:d3:b5:2e:b7:60:27:
         30:7d:0d:2b:87:59:49:3e:c6:30:3c:50:ad:d9:23:7d:d3:0f:
         5b:a4:2d:56:d6:8f:dd:b0:0d:1f:79:81:28:af:a1:b6:93:ec:
         e3:cf:2b:69:b9:5c:14:67:4c:01:72:be:79:6d:c8:9c:0f:a6:
         91:17:12:42:7d:d0:7f:a4:a2:52:1f:d4:cb:c1:f8:c3:e8:af:
         2f:52:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:58 2025 by rpki-client