Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa
File:                     2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa (raw, json)
Hash identifier:          1cfSUEEMZoski+ImSYdH6wt8A3zYBzWBSpyjuUlqnHQ=
Subject key identifier:   D6:30:12:03:67:8E:28:4F:3B:41:0F:BC:D1:37:0D:34:D5:5D:54:26
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584A9A662B775DFB9C916AB03700
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     40448
IP address blocks:        2602:fa83:b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2b:77:5d:fb:9c:91:6a:b0:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=2d37dc1a-a6a6-4168-be77-813091d268a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:f7:de:01:97:94:e7:9a:54:0e:0d:65:69:
                    4e:5b:96:0a:d8:7c:03:8e:96:e1:0f:0c:3e:c2:13:
                    1a:ba:80:5f:e6:bf:d9:da:84:87:a6:99:58:19:c7:
                    46:3f:21:ab:22:fa:4c:f5:cf:ca:d5:35:ec:dc:cf:
                    43:e7:d9:0a:ca:6b:da:29:3d:6a:db:45:56:99:97:
                    94:dc:c5:7b:f3:63:b9:5e:ff:d9:46:81:20:bb:d2:
                    11:00:ae:6a:1a:a5:14:a9:46:47:8e:ff:31:b5:24:
                    2f:ac:49:c7:7a:a2:46:35:59:17:53:e8:ca:0e:ec:
                    f6:94:6d:dd:cd:30:c1:b7:b8:71:a1:e2:07:c9:ef:
                    ad:db:b1:eb:b4:32:9a:93:e9:e9:77:5e:e3:bc:2a:
                    82:72:88:59:e4:e9:de:98:03:9d:c1:6f:2c:cd:6e:
                    4d:ab:9c:c9:c0:c9:4b:74:33:54:d8:5a:ac:ac:65:
                    54:d2:36:aa:02:0c:0f:d2:e5:1b:9c:fb:0c:e8:1e:
                    5f:f0:cd:af:5b:97:15:5a:b6:23:46:7a:ff:83:4f:
                    20:79:70:c8:23:ac:e7:4b:e2:62:2c:f1:d8:2c:46:
                    7b:02:38:06:21:58:b8:95:81:70:02:3b:86:40:a3:
                    b4:e7:77:3b:86:22:32:32:bb:63:c5:cc:93:28:31:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:12:03:67:8E:28:4F:3B:41:0F:BC:D1:37:0D:34:D5:5D:54:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/2f8752e5-42b0-3bea-b4ad-4f49bc4bfdc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa83:b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:f7:9a:3d:3d:7a:5d:7c:68:35:57:0b:2a:25:9d:aa:7f:
         d9:a2:9c:ee:1d:79:5d:86:b0:ac:60:5d:55:4f:35:cc:71:60:
         86:c0:af:b0:82:fc:cf:6b:2d:c1:17:4e:0a:3d:ad:74:69:e6:
         57:ff:8c:77:dd:79:90:2e:6d:46:44:2e:aa:b1:77:d5:6e:47:
         ad:3e:68:0d:0e:c6:58:99:4f:c4:47:f6:83:a8:d6:2d:04:30:
         4f:ed:81:ac:b2:26:77:29:c8:df:24:10:36:27:a4:89:cf:06:
         e4:f7:f2:e1:c2:25:b3:62:4b:35:3e:f3:41:d9:e7:43:a6:5d:
         80:53:76:5b:39:31:64:78:2c:00:00:9a:8a:1d:e0:4d:fc:22:
         03:94:b2:95:d3:e0:11:d4:68:83:ae:4b:e9:ed:b7:6b:a4:10:
         07:4e:8c:74:f5:b6:a8:2e:f8:6c:47:45:89:bf:9d:28:84:c5:
         74:f4:d8:d0:a8:c6:e5:da:13:54:15:1e:99:d9:5d:d6:3f:f6:
         2b:b8:cd:28:f6:e9:40:7a:f1:38:14:1f:d0:14:10:b8:76:c3:
         e3:db:02:6b:84:4d:99:ba:52:dc:07:64:a9:4a:03:91:0b:c2:
         93:fb:94:24:e0:2e:6d:d0:c7:80:39:8c:a0:3b:40:b7:bc:b6:
         48:d0:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:19 2025 by rpki-client