Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
File:                     c2382f90-9013-3121-a9e6-6335e705e8d0.roa (raw, json)
Hash identifier:          +KDOeiq5agn+OVvcAfoooO4HfV8y07aMPjZL9CZaE1A=
Subject key identifier:   B9:50:70:2C:58:BE:19:2E:CD:83:3D:F1:DC:BD:23:C3:3D:61:8E:98
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A814645AD0962A13A4036F3C0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     18526
IP address blocks:        2602:fd6f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:45:ad:09:62:a1:3a:40:36:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=66c0dbc0-01d4-43b8-8365-3eec96de7e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:a3:bf:9e:1c:1e:63:b9:79:3f:8f:fb:1f:
                    65:79:88:2d:a7:97:9b:93:98:5a:7c:2f:c6:28:6f:
                    35:21:92:03:9a:c5:47:16:78:11:02:ea:36:d8:49:
                    d1:ff:f8:92:59:c1:08:3a:c4:91:04:b5:ee:9c:45:
                    a3:00:09:2d:c5:dd:f0:1e:eb:22:23:60:50:4b:54:
                    38:14:fc:c2:98:71:6a:19:3b:33:b8:84:61:2e:5b:
                    80:7c:b9:67:77:27:5e:0d:9f:01:7d:dc:01:f5:88:
                    04:69:9a:17:af:54:7a:17:15:ea:e0:2f:88:c4:af:
                    75:03:6e:1f:17:23:b6:9c:b2:82:eb:07:ad:ec:5e:
                    bd:2a:08:c6:68:d3:7d:f8:a9:63:61:6b:57:15:cd:
                    30:6a:94:80:ca:ae:3f:2f:b1:cd:08:29:98:7a:e8:
                    5a:1c:ce:b1:da:ac:3c:dc:a8:b2:e1:d9:c1:1b:95:
                    33:a0:d6:46:58:9d:1a:e5:cf:79:11:5b:33:ed:2e:
                    7a:c4:75:78:46:a2:ff:8a:54:ff:10:0f:5e:0b:5e:
                    18:de:18:91:48:03:04:ae:9d:29:ce:f2:38:34:69:
                    57:55:0d:9b:03:98:c7:65:21:85:b2:2e:3e:44:c4:
                    99:cf:42:a9:64:0a:06:b4:89:9c:a7:e7:09:07:92:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:70:2C:58:BE:19:2E:CD:83:3D:F1:DC:BD:23:C3:3D:61:8E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:55:16:a5:81:de:d5:66:d5:4f:2f:a3:50:86:4b:ef:0d:
         ea:6a:30:de:da:81:46:2b:26:5c:b7:29:ca:6b:09:90:0b:6f:
         0f:99:50:aa:86:3c:53:75:56:18:87:88:6d:a8:97:20:98:35:
         39:17:9f:ae:04:b6:cf:ee:44:c2:df:c9:59:f8:3f:03:8d:ef:
         0b:48:9b:1a:3f:bd:6a:c5:be:58:16:d4:e6:50:06:2c:b1:a3:
         bb:5c:75:2a:4a:82:7c:bf:1e:69:c9:9a:87:de:9f:15:87:f8:
         fb:d1:b3:ab:15:c7:02:db:72:9d:e6:d2:e5:7f:a1:53:3c:cc:
         af:42:f7:f8:2c:f0:63:88:b9:ce:24:92:7a:78:3c:d3:31:7c:
         89:53:e3:9c:23:34:94:c5:4b:93:3d:57:c8:c7:7d:01:85:48:
         d2:77:62:2d:5d:b8:27:81:a8:f0:c1:7f:d0:58:ee:05:ef:80:
         90:83:5a:f4:0d:72:97:e9:19:be:91:78:a1:bb:4f:8a:f8:75:
         93:04:93:0f:06:95:b9:0b:a7:93:19:fa:c5:e1:04:40:4a:8a:
         4f:a5:fc:67:a6:6d:1d:51:31:37:60:b2:07:56:e6:3b:d8:dc:
         5b:bd:87:a4:f4:fa:31:a1:4a:e1:ba:5e:89:86:e4:43:be:5b:
         43:61:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:24 2025 by rpki-client