Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/13fc5bbb-4943-3cdb-8cd3-c7b4e30ee82d.roa
File:                     13fc5bbb-4943-3cdb-8cd3-c7b4e30ee82d.roa (raw, json)
Hash identifier:          LUKs7EEFw9BVLZEQEEqihsbmaxTpX4YnON1izLF7ZZQ=
Subject key identifier:   B5:CA:B1:92:C7:F6:C4:E3:20:B7:C7:6F:B2:02:5A:CA:94:AC:7B:66
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584ABBE6358DF49A3EB177DD43B0
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/13fc5bbb-4943-3cdb-8cd3-c7b4e30ee82d.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     40929
IP address blocks:        2602:f92a:c00::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:35:8d:f4:9a:3e:b1:77:dd:43:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=47582ce7-ed55-4708-854b-1eeda7d2983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:24:0d:cd:fd:b3:a3:cd:f4:de:f8:e1:a0:
                    61:f1:d7:c8:03:69:20:e1:d0:e6:e9:77:48:28:51:
                    ff:6b:1e:d3:12:dd:bd:18:93:00:0a:4d:d2:ab:a2:
                    96:71:94:e7:7a:ea:b1:79:22:b1:80:a2:79:e5:a8:
                    a5:76:c4:62:65:14:27:fa:8e:db:6a:9e:20:97:85:
                    0e:ac:d0:c6:55:59:3e:f0:57:f9:f6:07:ac:79:46:
                    b6:69:2f:aa:03:ba:94:bf:2b:ea:57:6c:aa:6e:de:
                    f5:23:04:62:61:af:77:fb:d7:15:f8:44:49:c0:6c:
                    6d:a8:2b:72:97:32:77:42:a4:5e:89:71:23:24:38:
                    41:09:47:a3:da:49:01:a0:94:d7:54:72:04:0a:0c:
                    81:e2:bf:4f:40:f8:6e:ec:03:99:60:84:10:7e:70:
                    a4:33:bd:a9:1a:57:07:2a:c4:8c:74:e2:67:0c:5c:
                    79:f6:35:41:f0:42:65:89:91:d5:26:d5:f7:6c:57:
                    10:b2:64:61:33:2f:49:64:8b:71:c5:f2:bc:b8:2b:
                    b8:79:a4:2b:db:ca:7a:08:2b:e3:ad:8a:82:56:24:
                    35:b2:0c:03:83:af:4c:71:f1:65:fe:51:ec:6d:a1:
                    e2:3b:12:4c:bd:aa:24:6f:c4:50:15:d4:b9:b4:00:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:B1:92:C7:F6:C4:E3:20:B7:C7:6F:B2:02:5A:CA:94:AC:7B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/13fc5bbb-4943-3cdb-8cd3-c7b4e30ee82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:20:58:42:7e:f3:eb:fc:16:ce:a4:7c:ec:37:bd:59:ef:
         86:03:ec:b7:a8:40:a9:ab:97:b5:b4:d6:50:11:56:4d:9b:f5:
         0f:9d:0b:8b:d6:7f:b9:a1:f0:cc:90:ef:86:c4:47:df:83:7d:
         66:24:f1:0e:6b:50:ad:fa:43:c4:33:52:f0:31:b5:c5:dd:5e:
         00:4c:75:28:98:d3:1a:75:13:8f:67:2d:45:58:0d:61:22:ce:
         be:66:b7:32:fb:44:85:98:84:ff:3e:f5:b0:ef:ca:6a:da:3d:
         a8:5e:31:36:77:84:2c:a8:2e:06:13:5f:4c:a6:aa:a0:20:d2:
         f5:12:19:2a:1d:0d:3f:3c:1d:93:31:66:c8:a7:fa:42:5d:3f:
         02:9c:59:75:39:da:3b:a2:c4:ef:af:c8:14:da:e5:c7:c4:92:
         7b:bf:bf:c2:cd:4b:9c:63:7b:c1:ea:80:ea:b0:20:24:7e:3e:
         6d:c7:48:6b:82:b1:1b:8a:d3:86:30:7d:50:da:1b:7c:41:06:
         9c:6d:2d:7c:51:14:12:f9:91:b5:c3:13:02:b8:4d:e2:29:df:
         48:b5:a2:af:4c:3c:e4:67:d2:a5:08:8a:7b:65:47:b9:b5:7d:
         4e:5e:b0:41:4c:52:26:c2:38:75:a4:7a:8e:44:02:0e:a8:27:
         c7:91:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:48:30 2025 by rpki-client