Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          GuJfwd0hCwzoYwuD7tT5X3BmqUGvfM5bD48ktHlL4qI=
Subject key identifier:   AD:C6:84:20:C4:E6:40:49:ED:8B:7A:07:15:95:FC:A0:93:EB:31:2F
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584A8C70CC208749CEB7A43B7F40
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:cc:20:87:49:ce:b7:a4:3b:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=4d6b3576-bfd2-4741-9ea2-80d25e1a7ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:62:10:0e:03:98:ae:c6:30:c7:c6:96:17:
                    82:e4:2f:cf:3e:7d:e7:9c:fb:a0:72:d1:5b:20:0e:
                    b2:96:23:9a:1d:9e:03:64:49:5b:a5:a6:07:b4:9f:
                    f1:bd:f7:3d:32:06:88:46:3b:fd:26:96:c5:65:ff:
                    76:4a:f1:25:d9:6a:a2:47:13:ca:eb:e7:1f:96:d5:
                    0a:7d:23:8b:af:fd:a2:da:2e:5c:08:8d:dd:5c:06:
                    86:db:82:f4:87:cb:d0:fe:40:d0:3e:c3:b8:e0:e8:
                    e4:e8:4d:a4:50:16:41:69:4b:f6:24:1d:46:0f:dd:
                    4c:3d:28:0e:90:35:84:55:c2:04:8f:1b:69:7e:69:
                    26:12:08:97:d7:ec:90:c2:63:37:e8:ee:9a:5d:85:
                    1f:9d:7b:e1:06:81:9b:61:b9:50:18:61:48:d4:38:
                    e1:1b:d9:ea:28:e9:c2:85:aa:a8:88:7d:e5:a8:b3:
                    1e:fb:be:de:57:ac:b4:52:1f:bf:30:25:22:93:74:
                    b5:cb:95:7c:80:fa:f7:33:d1:47:ec:5f:f7:4f:bf:
                    91:58:ca:bd:4e:a7:06:fc:77:5c:06:36:e9:d9:75:
                    33:63:c0:e4:3e:e5:13:27:d3:7b:7d:e5:b8:0e:fa:
                    fc:d1:8b:44:2f:d6:2c:f3:27:bf:1f:0b:a8:5e:9e:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:84:20:C4:E6:40:49:ED:8B:7A:07:15:95:FC:A0:93:EB:31:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:8f:4a:63:f3:d9:ae:bf:07:1c:91:1f:13:c9:6c:69:26:
         2d:26:bd:39:d9:90:de:e9:0f:15:d7:1c:c2:e4:f0:10:28:3e:
         9a:80:82:d7:97:24:51:80:b5:41:02:e0:93:3c:b5:10:3e:13:
         e7:7a:4d:f4:4e:27:f3:35:ae:3e:7e:77:c6:73:70:91:ab:4f:
         9a:52:45:04:b3:84:30:d9:a4:06:e1:8c:05:c8:35:41:03:5a:
         c8:b4:d2:f3:cc:25:95:48:48:52:db:8a:88:bc:19:6d:e4:85:
         84:b7:d0:56:28:f9:2f:0c:24:5c:90:95:cf:5c:31:02:33:5f:
         09:14:5d:16:6c:ab:67:86:fa:e1:61:81:dd:d3:fa:c7:d1:95:
         2e:84:07:3d:eb:4d:cf:84:04:6b:cc:89:bd:f8:76:75:dc:cf:
         f3:a4:3e:86:9f:13:0c:00:fb:1c:cb:fa:d8:78:49:a1:80:bc:
         50:47:c6:4f:fc:38:51:bf:9c:25:8e:e3:00:4c:72:ee:80:bd:
         de:1a:1a:dc:87:65:e7:2c:ff:de:18:3e:fe:5e:16:37:39:c2:
         1f:94:53:b3:87:88:f5:3e:41:b4:df:0c:ac:f1:6a:41:c8:ef:
         e5:00:ba:b6:0d:9c:2e:79:0a:62:61:76:30:65:c4:04:03:23:
         c4:a1:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:14 2025 by rpki-client