Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
File:                     8e995a78-3dbd-35dc-834f-2588245e7f22.roa (raw, json)
Hash identifier:          scxHg0RxMYT814aBLcsso3TCLUQdlVHzTUEH5rz55oA=
Subject key identifier:   94:35:70:6D:63:CD:EE:55:DF:64:84:31:51:3E:D9:D0:62:6A:04:BE
Certificate issuer:       /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial:       010D0C9F4328584AADF11EC98476D13E04901680
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:814:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:1e:c9:84:76:d1:3e:04:90:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=23ea6a1f-b356-47f1-9785-5e6644cbaad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:5a:bb:d3:f8:80:ad:e8:99:2b:97:f1:b0:
                    d7:95:03:59:9f:12:ec:98:34:d5:c8:c5:79:1c:36:
                    53:76:6e:80:f6:9e:3a:b3:55:c5:16:d3:32:1d:32:
                    e5:16:31:2f:04:b9:35:ba:db:8d:73:35:48:cd:8a:
                    35:f5:cd:da:49:c9:28:36:9a:25:51:13:5b:4b:8e:
                    1b:60:8b:e9:ef:af:74:e8:7a:82:9f:40:2a:00:b4:
                    77:05:73:89:24:20:38:45:dc:5d:40:4d:71:36:1a:
                    7e:80:4b:d5:23:20:b6:08:38:8c:de:94:cf:ab:1d:
                    d2:10:87:79:19:f6:0d:1d:2e:f8:11:dc:13:02:40:
                    22:d7:b6:a8:36:4a:6d:18:8c:d1:67:71:89:d3:48:
                    b8:a1:7c:20:15:2c:67:9a:42:d7:4f:71:4b:a3:dd:
                    8b:e6:b0:c5:64:d4:4a:5c:87:cf:b6:1f:5d:72:8c:
                    63:f6:ae:ea:75:b2:ea:7b:6d:65:f8:27:97:c3:b9:
                    1a:da:27:16:0f:64:6b:79:d6:71:4c:c8:9f:da:05:
                    74:50:70:78:22:64:2f:8c:94:f4:2f:d2:79:1a:06:
                    6d:e8:13:bf:5c:4d:6c:d2:42:cd:a6:bd:da:d4:05:
                    3e:33:52:b2:cb:67:a2:e4:62:63:4f:ae:df:d9:97:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:35:70:6D:63:CD:EE:55:DF:64:84:31:51:3E:D9:D0:62:6A:04:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl

            X509v3 Authority Key Identifier:
                keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:72:a9:d9:67:91:1f:7c:ac:b4:01:99:5a:19:a3:a5:f3:47:
         ec:59:e1:18:8d:9b:b6:f4:5e:3c:9a:de:d4:1d:3f:be:ca:04:
         4e:ea:04:2d:e4:4e:b9:d7:42:ac:86:87:23:c0:93:48:7b:4c:
         09:4b:e8:e3:e4:57:4a:0d:35:16:1b:f5:db:19:07:f9:f8:6d:
         7d:e0:13:f8:82:5b:a9:dd:6b:33:7f:2b:22:12:de:d8:07:ce:
         a1:8d:70:b1:c8:16:3c:c1:e1:b7:30:77:c6:bf:bb:9d:e3:54:
         12:f3:f3:8c:2f:f5:dc:47:14:4b:37:1d:cc:af:91:b6:bc:9d:
         88:bd:14:14:f7:dd:e5:1e:54:13:49:58:a0:f0:fd:6a:62:87:
         6a:84:8f:21:4a:5f:ac:5c:86:94:0d:1d:f7:32:bb:8d:d8:2d:
         b6:9a:48:4d:94:3a:10:15:a5:a3:ab:08:8b:f7:e2:b0:02:16:
         13:f0:21:8b:ea:1e:10:39:4f:eb:c9:26:af:99:cb:c0:c7:0d:
         d6:d2:23:bf:3d:73:4c:29:5f:01:a2:27:03:f3:92:41:bb:ff:
         2a:58:74:2f:f9:83:3f:c5:8b:6d:36:55:68:f5:8c:ff:58:dc:
         65:23:58:28:aa:6e:e0:3d:a2:95:05:f6:7b:75:47:55:cd:8d:
         4b:2a:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:30 2025 by rpki-client