Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa
File:                     10a98a9b-b733-37e9-901d-63dd77533c16.roa (raw, json)
Hash identifier:          1rOMgewe8/P6FMFfcc0vzhBv85s5t7R3+EeC2dkwRdQ=
Subject key identifier:   F3:AD:BD:8F:1E:F3:3B:85:B6:35:6B:45:0F:59:71:37:B8:17:04:64
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F4328584A9D30E94CC9AAB41F56D5F2F0
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     149522
IP address blocks:        2602:f829::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e9:4c:c9:aa:b4:1f:56:d5:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=a8adcd22-923b-407d-a17f-bf2b17898875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:1b:a2:80:80:01:2f:9b:f5:14:21:2c:7c:
                    12:4d:2a:58:0f:10:76:50:41:34:3d:90:76:e2:87:
                    3b:f7:93:4c:43:11:66:df:f6:cb:7c:7c:bd:a8:1f:
                    ee:c8:08:c7:5e:85:88:05:c5:77:5b:9a:30:fe:b1:
                    24:a3:6b:c6:70:fb:57:66:19:99:7d:19:77:5f:87:
                    a2:65:35:fe:31:b9:aa:60:e6:8c:05:84:e7:ff:35:
                    a6:7e:12:45:4a:f4:10:82:2f:68:56:27:77:3c:73:
                    9e:ef:1b:dd:6a:b2:f1:d5:6c:8c:96:9e:3c:f8:40:
                    88:14:48:32:17:73:8d:37:c5:79:03:56:49:81:19:
                    eb:42:0e:dc:ad:25:34:3e:af:8c:1c:41:c5:6f:a1:
                    57:a5:a7:96:5a:01:a4:9b:e3:0a:96:82:a2:ac:b3:
                    91:58:1d:95:53:f4:0b:f8:22:37:94:1f:b4:43:fd:
                    c0:03:01:fe:21:6a:31:aa:6b:97:55:35:f6:38:ec:
                    25:ef:5f:77:d8:9f:80:06:36:b3:2e:2e:7f:aa:05:
                    ca:69:11:e2:d0:dc:9c:6e:62:b5:6f:b8:94:14:73:
                    f9:8d:49:a4:67:cd:5f:70:b0:b7:c3:75:49:a9:97:
                    48:ad:93:18:73:10:af:b4:4f:48:53:95:11:12:58:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:BD:8F:1E:F3:3B:85:B6:35:6B:45:0F:59:71:37:B8:17:04:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/10a98a9b-b733-37e9-901d-63dd77533c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f829::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:00:2c:4d:10:5b:02:f8:11:08:fa:64:02:b6:22:a1:f6:4d:
         a6:bb:45:be:74:ed:03:8e:dc:a6:1a:a6:0e:65:d8:e4:bb:91:
         53:54:27:09:b4:7d:62:39:c3:31:9d:72:17:45:21:3d:3f:54:
         d8:9d:61:67:e9:0a:95:9b:6e:b6:e7:44:30:94:53:16:3e:28:
         26:96:a9:0a:ed:02:d0:b9:f2:6e:01:e1:0d:c8:89:27:18:27:
         71:4a:27:6e:f4:23:b1:2a:a2:99:7a:ff:73:37:c0:50:ea:b9:
         ab:9d:1d:91:ba:ac:9d:0b:34:22:1c:75:14:a2:17:a3:d6:ba:
         7c:4a:60:11:c0:e9:06:47:e1:9a:1d:93:fe:3d:67:47:0b:30:
         f7:76:57:53:f8:55:65:2d:58:99:1e:15:9d:1d:c0:b6:0d:00:
         0c:4b:84:6a:94:36:7e:0c:44:2c:78:78:c0:ae:30:df:75:59:
         37:71:73:3f:0b:74:16:dc:d3:b2:98:06:59:76:7e:6d:9f:c3:
         97:dc:67:6e:e5:c2:81:b1:c6:a4:0e:ce:57:66:31:8b:d2:8c:
         4a:25:a2:1d:a0:53:ae:63:66:3b:73:92:37:12:8d:6a:5e:ae:
         22:31:d6:5b:a6:bb:b2:53:c4:11:49:16:f7:33:35:e8:77:a8:
         e6:29:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:44 2025 by rpki-client