Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/4e91333d-b527-3e09-b251-3cbc11cfb653.roa
File:                     4e91333d-b527-3e09-b251-3cbc11cfb653.roa (raw, json)
Hash identifier:          NCdaYxRhNzYCSmEg9XP8JYLg8dhsF0ERmSnEWpkbKMw=
Subject key identifier:   14:0B:16:F5:48:D4:14:A6:D8:DB:EA:F6:62:25:C5:CB:0D:81:69:C7
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584AC2E10E0F419572A52E5D3F00
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/4e91333d-b527-3e09-b251-3cbc11cfb653.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     214258
IP address blocks:        2602:fbe8:f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0e:0f:41:95:72:a5:2e:5d:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b1b995ab-4e29-410b-81f7-97b4175c28d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:4d:be:b5:5f:ee:f1:c5:8d:ba:d6:fa:89:
                    75:f3:dd:e4:fb:d1:30:2b:bc:09:2e:a9:1b:0c:31:
                    6b:2d:d8:16:04:a3:80:09:15:d3:19:55:38:8d:97:
                    7a:b7:a6:81:80:1e:c8:e6:85:1e:f1:df:b9:94:f8:
                    1d:ca:21:e4:7e:19:cd:9d:1f:ce:42:9d:6c:71:79:
                    84:58:32:00:da:1b:9f:75:35:c4:c3:cc:5d:63:7b:
                    e1:3b:50:e6:81:14:a3:ca:1a:ed:d7:e3:d5:82:b6:
                    46:42:fc:08:2a:a3:76:c5:1c:ee:7e:b9:bb:7e:bf:
                    c0:35:41:af:94:e9:0a:56:0d:5e:c1:7d:16:09:a6:
                    7f:5f:c2:1e:b3:2c:fb:bf:59:b2:70:49:8f:43:b9:
                    35:5e:c6:75:11:df:4c:9b:05:56:76:41:05:d1:b3:
                    c4:0d:b9:d4:87:97:bf:25:54:59:9d:5d:9e:c0:a4:
                    39:29:86:40:f0:7e:b6:d0:6d:cc:f0:58:20:ca:e2:
                    09:9d:9d:de:ff:e7:90:fb:27:8f:dd:1a:6d:15:75:
                    8c:f3:89:98:07:34:cd:86:ba:1c:ae:45:d9:57:73:
                    85:b0:11:9a:5e:fe:98:f3:6f:16:8a:95:97:ed:b2:
                    9e:e9:b8:c0:02:27:c2:50:7a:70:b9:7a:4d:28:76:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:16:F5:48:D4:14:A6:D8:DB:EA:F6:62:25:C5:CB:0D:81:69:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/4e91333d-b527-3e09-b251-3cbc11cfb653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:d8:bd:85:fb:a7:bd:a8:df:fb:ed:77:cc:e9:c0:a9:a5:
         de:0c:9e:ed:36:ac:b8:f4:7b:a7:b4:6a:2f:59:f3:76:48:a6:
         0a:b2:f1:06:48:01:92:25:86:1f:a0:05:2c:95:6a:e8:b9:e8:
         af:2a:b1:b9:f0:f0:fb:3f:a8:f1:95:13:38:a3:91:30:9a:8a:
         e0:07:9c:64:f4:87:a9:40:db:e6:75:51:93:c7:9a:9b:56:8c:
         e0:8d:b2:bb:f2:5c:0d:0c:2e:f8:34:5e:94:1b:50:36:99:b4:
         76:07:23:22:20:21:4d:e1:8f:f8:47:0e:75:f6:c4:e9:61:50:
         fc:bc:01:95:c2:ea:95:39:00:01:67:ab:32:7d:98:25:78:60:
         3b:60:37:12:77:e3:6f:cd:c1:7f:9b:55:81:93:ff:0a:1f:e9:
         4b:d0:5f:c2:dd:52:3e:95:e8:46:21:3b:c8:1c:76:09:a1:40:
         28:5e:54:fa:e5:df:d0:d3:46:03:47:da:a3:57:6c:86:01:d4:
         f3:27:22:52:9d:3b:fd:a5:03:f3:62:52:95:6d:96:68:70:b1:
         12:ee:98:2f:11:56:94:38:9f:b9:d5:bf:c0:5d:33:a1:da:fb:
         f6:f1:ea:22:83:25:3d:49:0b:a6:a0:6c:2c:4c:77:65:01:5c:
         86:dd:02:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:10 2025 by rpki-client