Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/52f84d08-edcb-3e7a-882e-304152bfed8e.roa
File:                     52f84d08-edcb-3e7a-882e-304152bfed8e.roa (raw, json)
Hash identifier:          B6TIDtY+CKfaNtTDF20l2YaDLsXXx8HtkFyDYdgri5o=
Subject key identifier:   D3:17:77:A3:07:2B:32:5A:EB:D2:5D:16:5F:0E:43:BA:FE:3A:54:F9
Certificate issuer:       /CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
Certificate serial:       010D0C9F4328584A9A662B5E6D48E288A6D86700
Authority key identifier: C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/52f84d08-edcb-3e7a-882e-304152bfed8e.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     40448
IP address blocks:        2602:fa83:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2b:5e:6d:48:e2:88:a6:d8:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56dbff2-fc3f-4d2b-b51d-751ee1417082
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=31913901-dd9c-4862-86b7-8503ecc2e337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:b1:50:6b:d3:3f:43:ff:83:69:2a:6d:88:
                    32:ee:18:36:c5:d3:ce:7a:22:c9:3d:f3:5e:ea:50:
                    ae:95:2f:13:6a:24:fa:21:08:b4:13:47:0a:19:bc:
                    85:ca:1c:94:14:27:f0:f2:93:0f:30:ee:c6:c0:b2:
                    d0:e2:da:66:2a:43:3d:97:4a:08:f3:17:3f:cd:23:
                    0a:04:42:20:ad:05:06:87:7e:be:c8:3e:a8:c0:7a:
                    48:fb:55:e5:a6:80:07:ea:ff:26:db:36:e5:01:16:
                    d6:20:21:62:31:9f:ac:36:cd:e1:48:37:47:ce:2d:
                    27:e1:02:2e:4c:3c:22:9d:5b:c1:d7:03:c0:a3:d2:
                    5c:66:6d:a7:e6:2d:94:5c:c5:42:e2:23:00:c0:2a:
                    99:f9:7c:f8:bb:ee:97:70:3c:8c:49:48:fd:36:87:
                    e6:c5:0c:d7:4c:bd:e4:5d:e8:3e:62:98:15:d0:60:
                    f7:79:5f:60:22:b3:e7:c9:1b:b5:3c:8a:3b:ed:ce:
                    8b:13:dd:5d:62:1c:6e:97:f2:e1:e7:d3:67:70:3b:
                    d5:ab:f4:ff:f8:f8:fd:69:bc:c9:5f:be:70:e9:25:
                    88:5b:47:6f:99:88:60:bc:07:fe:15:48:50:7f:0c:
                    f8:b3:c2:73:95:37:25:31:13:67:8b:8c:25:f5:7e:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:77:A3:07:2B:32:5A:EB:D2:5D:16:5F:0E:43:BA:FE:3A:54:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/52f84d08-edcb-3e7a-882e-304152bfed8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082/c56dbff2-fc3f-4d2b-b51d-751ee1417082.crl

            X509v3 Authority Key Identifier:
                keyid:C1:D5:F2:8C:79:DF:45:77:DE:45:E0:2C:36:01:9F:AA:A8:7F:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c56dbff2-fc3f-4d2b-b51d-751ee1417082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa83:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:37:14:1a:6c:c7:bf:37:83:66:95:10:d2:9e:7d:ef:30:
         ac:43:9c:11:de:28:f0:5e:f4:99:09:40:32:2e:19:67:5b:32:
         25:da:81:71:c0:86:23:96:3c:8f:d1:ef:68:ed:87:24:0a:03:
         ff:b4:d7:6a:c0:0a:3a:4b:78:45:17:d6:91:aa:bd:86:b6:ff:
         ba:2f:4e:3f:f8:9c:54:ff:ab:59:92:a2:e5:b5:ca:5a:05:03:
         f0:e3:25:c7:ec:d2:83:9f:a9:e7:25:d1:d5:8b:e8:35:47:33:
         72:ce:67:1f:db:f9:a2:42:80:5f:b8:dd:49:0e:a9:84:0d:89:
         4e:fd:3b:11:c9:6b:5d:f5:0a:4d:11:3d:37:f1:b4:0d:98:54:
         9d:89:8f:ba:ea:37:41:f7:a5:20:8e:ac:ce:0c:8f:d2:61:c7:
         92:12:6e:2a:b5:ae:06:97:b7:d4:15:52:a8:6e:89:1f:d4:12:
         c9:db:17:77:73:ed:0d:56:e1:e7:b7:a1:77:b6:0b:2d:77:96:
         97:1d:df:7c:27:81:68:c8:7a:0e:19:de:23:c4:61:ae:4f:1b:
         3d:11:61:e6:2a:b5:ed:20:64:a9:fa:f1:65:6b:05:cc:a2:28:
         40:5e:25:1e:a1:f7:b5:bf:fc:75:8e:04:7a:76:cd:12:30:dc:
         87:c5:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:37 2025 by rpki-client