Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa
File:                     a463c619-0834-364e-9f48-291b1b91fa42.roa (raw, json)
Hash identifier:          p807qJ3nOh6x3bZ4kKa8AP1yzfrPFBP9+41R9Ns62bc=
Subject key identifier:   C9:87:2D:BB:73:99:1A:D6:87:CB:30:C9:84:38:69:AE:7B:D1:39:F2
Certificate issuer:       /CN=77258d44-b15b-4045-943b-356f0becdaa2
Certificate serial:       010D0C9F4328584A7D15F5081B3C15F4D1AA33E0
Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     399554
IP address blocks:        2602:fc43::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f5:08:1b:3c:15:f4:d1:aa:33:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=e4a99b91-0a65-4e6d-8e32-25b829d0022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:01:93:b8:df:3f:1b:05:e3:c1:5f:71:52:
                    ab:d5:1d:eb:0d:17:6d:46:01:10:65:69:a0:52:71:
                    da:64:47:8c:57:7c:a4:2e:27:94:1c:04:d2:f5:d7:
                    90:b0:ea:46:34:bb:7b:b9:2d:d7:c1:34:d4:ed:e9:
                    e6:60:5b:a7:ae:68:4a:d8:18:41:9a:fc:8e:1e:df:
                    11:b3:d3:0e:bf:23:d5:0c:7f:7f:66:bc:5b:0b:18:
                    7e:32:c2:db:1a:a4:74:46:87:0f:77:f6:b4:0d:73:
                    ad:bc:af:41:fb:02:06:94:8c:fc:20:d5:65:96:f8:
                    f6:77:af:2f:00:af:99:78:c3:29:05:03:25:9f:93:
                    7d:d2:19:bf:19:38:86:fd:95:2a:c8:0f:c0:51:0a:
                    c0:d6:56:87:55:b8:45:25:d3:6f:5b:e9:62:9c:88:
                    fd:ef:2c:1b:ad:f2:c2:1e:a6:97:79:39:12:56:fa:
                    40:3a:76:64:01:7b:51:d8:63:d0:cb:ae:d5:6c:1a:
                    16:bd:f0:9a:a4:8e:7a:76:ae:f2:19:ed:d7:d5:0b:
                    a9:2c:34:8a:4f:26:07:a7:9c:0a:6d:c0:4a:5b:9a:
                    30:57:d1:02:6c:ee:9c:f4:31:25:5a:d2:0f:eb:43:
                    9e:2a:03:3a:b0:f4:39:55:8e:5e:99:fa:c5:da:68:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:87:2D:BB:73:99:1A:D6:87:CB:30:C9:84:38:69:AE:7B:D1:39:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/a463c619-0834-364e-9f48-291b1b91fa42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc43::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:c7:07:6b:ce:a7:41:95:ed:cd:1a:ba:60:78:81:63:57:
         0e:c0:a1:10:20:9a:07:06:4e:1e:10:c4:f9:d4:c0:0e:6a:11:
         68:44:97:1f:4b:92:d6:fa:d6:e6:31:a1:02:65:ae:7d:13:2b:
         1e:0f:56:24:03:c6:41:3c:b2:b3:a0:1c:d0:bc:29:6c:c9:67:
         8c:a6:08:3c:48:fe:42:dd:a8:02:37:59:3c:dc:b2:2b:2c:42:
         90:b7:57:de:08:3f:8d:b6:c3:cd:be:06:85:3d:39:c1:0a:86:
         9a:22:b0:9c:3e:c9:f5:ba:3f:bd:1b:de:62:15:68:b6:de:17:
         0d:48:c6:09:c7:58:bd:24:b5:d2:25:5f:55:8b:bf:48:63:f0:
         c5:49:8e:ad:a5:de:e6:32:6a:33:4d:db:7e:7b:35:db:be:25:
         ad:82:f4:03:87:cd:f4:c4:73:19:95:57:6c:f9:69:0f:f3:9d:
         32:84:b4:58:98:09:f4:cc:90:13:41:3d:3a:c1:49:01:d8:16:
         89:31:84:a0:18:2e:33:5a:46:60:98:23:8a:d2:d3:9f:ca:0b:
         30:a1:6c:0d:25:9b:2c:85:38:a5:a4:5f:30:02:5c:58:d4:23:
         9a:55:a0:87:b1:d3:6e:b1:d0:85:29:12:72:7e:80:52:7a:7b:
         c8:2b:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:12 2025 by rpki-client