Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
File:                     57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (raw, json)
Hash identifier:          Pd7coI/onItOabD+GZeN7f9+ncSNqLbXuggUl0f3f10=
Subject key identifier:   05:1A:5E:BC:A2:31:DF:71:47:5D:C1:24:25:B0:5D:87:0B:72:F7:B9
Certificate issuer:       /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial:       010D0C9F4328584A9FFBAB88C1CF4A8512774E00
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     1030
IP address blocks:        2602:f9d5::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ab:88:c1:cf:4a:85:12:77:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=00a87943-3468-4ce6-b198-d9126a6564fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:b9:d1:4c:b7:b3:a7:71:58:83:98:29:7f:
                    9d:50:4c:12:89:97:c0:6a:cf:49:63:66:65:5e:80:
                    3f:48:c6:f4:94:a5:91:d9:ef:a3:f1:12:cc:a2:2b:
                    0f:a6:ed:3a:08:56:18:57:72:f7:2e:40:4d:7a:6e:
                    e3:f5:0e:41:4b:5c:ac:52:61:64:ef:4f:33:64:32:
                    8a:bd:6c:65:f3:b8:ce:37:a7:4f:e8:05:af:55:78:
                    0e:2b:85:2b:f3:03:0a:2c:e6:71:75:7d:8e:cb:13:
                    78:5a:37:ed:02:c1:63:61:58:d8:4b:6b:7a:08:de:
                    a7:09:55:63:03:2e:3f:c3:8e:83:8b:d5:ab:f2:e5:
                    8e:3a:49:33:4d:3d:6f:1a:2b:40:5e:f1:b4:9d:f6:
                    56:a8:90:ed:78:18:5c:af:6f:5a:d6:27:c8:37:a6:
                    17:d6:d1:ef:c8:13:ee:32:7c:b7:28:90:47:10:45:
                    74:d9:a5:26:84:a7:8b:d7:5b:7a:bf:18:99:ec:35:
                    9d:a4:5e:d0:6a:5a:8f:c4:d8:ab:d3:09:61:dc:26:
                    dd:c8:87:08:d7:6d:91:50:5f:86:39:c2:ef:72:75:
                    4f:dc:7a:03:98:c4:1a:18:2d:1b:31:13:9b:58:ec:
                    e0:61:6b:82:4e:84:6c:5b:aa:17:72:b3:f2:40:f2:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:5E:BC:A2:31:DF:71:47:5D:C1:24:25:B0:5D:87:0B:72:F7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:fe:09:49:cd:db:7b:b0:65:74:c6:39:53:45:ea:cf:cf:
         5d:59:ed:41:66:59:97:f4:9e:23:e3:19:f3:3a:c3:17:b3:31:
         30:25:5a:ab:85:b5:4c:85:9e:8e:20:31:40:52:12:e3:48:bb:
         eb:8f:c2:f7:11:f9:76:c1:93:94:58:eb:6d:db:73:06:98:ee:
         65:90:2c:79:28:e4:92:d5:91:98:11:ca:9b:6b:4e:63:3e:72:
         f6:ab:bb:eb:40:92:ed:e2:8f:87:d4:9c:c5:be:0f:b6:69:dd:
         33:87:4a:40:45:96:cb:e5:41:f5:e7:74:07:ef:0e:0d:2f:26:
         5b:f4:35:05:d0:8a:6e:85:21:a8:9c:99:cd:5c:b2:0c:2b:ba:
         3e:54:71:b9:8e:ed:16:d7:cf:91:09:7a:f8:43:04:fa:bc:b4:
         4a:04:61:6f:24:27:9a:a8:8a:45:2c:2f:1a:0c:e8:4f:30:17:
         8f:26:8f:14:be:c7:f5:88:0c:78:ee:fe:a1:a7:15:b0:48:29:
         65:a6:9a:4b:6f:2c:5b:68:b5:5b:57:15:41:d4:a1:ab:51:1b:
         71:bc:4e:49:b7:17:57:d6:8b:b9:03:a5:d4:36:34:61:c3:cc:
         78:f3:6f:e8:af:82:24:25:25:44:c5:e3:5a:31:81:fa:cb:3f:
         f7:5b:04:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:53 2025 by rpki-client