Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa
File:                     b3acb821-2c67-31af-a81d-96ce285db895.roa (raw, json)
Hash identifier:          D8dIBWejSxNbTq5gWT9n5LdUzhp6hfvQdBtYN7WGZ+g=
Subject key identifier:   A1:80:99:03:A8:6D:42:C9:B4:88:32:08:85:E5:62:32:FE:61:1C:EC
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584A8575FD53210C30B763A72940
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     212854
IP address blocks:        2602:fa92:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fd:53:21:0c:30:b7:63:a7:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=12d32411-fc95-4c93-b187-7acb9dd79ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:de:b1:7b:8a:3d:45:74:d5:79:09:e7:9d:29:
                    00:76:ba:25:95:1f:35:ff:25:52:0c:01:68:8f:c3:
                    a3:c1:54:6d:eb:77:a4:d2:5a:db:17:4b:1e:8b:8c:
                    30:d4:c4:c8:b8:5b:1f:34:98:c9:df:49:f7:66:78:
                    1f:60:50:3d:fc:45:62:a7:26:52:82:f2:79:45:e5:
                    03:d3:b2:32:c5:2a:d3:50:56:df:ce:4a:32:34:9d:
                    81:17:68:f5:84:66:1a:75:0a:ec:48:de:64:31:6e:
                    e9:bd:48:f1:5a:79:13:8d:48:10:26:fb:95:83:f1:
                    5f:a4:c0:e7:92:4c:76:49:b9:a6:5e:f0:d0:9f:f4:
                    72:6f:5f:36:7f:c0:ab:12:54:91:36:93:03:4e:65:
                    d1:ed:a4:28:d3:f5:e6:9d:de:b9:c6:46:23:ed:71:
                    b6:c2:00:d9:2d:c1:ec:23:5f:4e:68:7a:e2:27:24:
                    f2:52:b9:a6:49:bd:43:08:a9:f5:ea:17:9b:05:81:
                    3e:30:47:1b:a5:6c:d0:9a:62:e3:5b:9a:dc:0f:01:
                    7d:66:0e:81:af:a0:c1:1c:b0:09:cb:ce:27:85:a6:
                    c9:ce:df:ec:c1:6d:ba:26:09:d1:fb:b7:8c:53:8c:
                    da:79:87:d9:09:bb:74:0d:e7:d8:b5:4a:80:df:10:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:99:03:A8:6D:42:C9:B4:88:32:08:85:E5:62:32:FE:61:1C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:51:63:c0:4e:81:0a:bf:97:02:83:0a:f5:ac:62:0e:d1:
         82:9a:58:9f:4d:74:a4:bd:60:9d:5c:57:71:96:ec:9e:6c:13:
         9b:0a:ef:ec:b7:f4:dc:b6:60:b7:57:cb:2c:46:9a:69:a0:a3:
         33:6d:1e:b6:60:42:64:44:2c:d1:03:ce:66:e4:ce:ee:f4:12:
         7b:4e:03:60:03:2d:30:29:16:d0:4f:05:07:42:24:f3:65:d8:
         05:fe:ce:e3:98:af:a9:c8:6c:9f:ae:d5:f1:91:95:3b:97:f6:
         83:77:63:13:a7:15:30:be:85:45:68:c7:f2:a1:b3:67:00:0d:
         4d:c1:de:61:38:71:08:e2:4b:3a:d4:a2:7a:a4:1a:68:18:71:
         a4:1b:a4:00:25:f6:a7:6c:00:56:73:cc:23:c9:d9:d6:94:5c:
         ac:13:f9:2d:8b:3a:6a:9e:06:59:9a:a3:05:be:5e:67:8f:c4:
         e3:2d:d1:3e:b6:f1:89:9c:31:d9:bf:d1:54:67:4d:ab:a4:ff:
         ca:d9:60:ac:05:1c:28:e6:a7:6b:dc:c4:ae:b2:cd:3d:45:13:
         34:e5:87:9e:f1:ae:c3:31:60:27:b9:b1:f9:78:cf:a2:d5:ea:
         b1:04:7b:a3:c6:61:a8:03:61:60:02:39:9b:72:b1:0b:c2:71:
         9b:c0:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:01 2025 by rpki-client