Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa
File:                     fb61fbb2-966c-3035-9349-36a35742a9da.roa (raw, json)
Hash identifier:          J/lFsUAP7TLXw+dh/Sz92sOSMBynOSC3GXA8gSJnDeY=
Subject key identifier:   B7:66:48:D6:32:13:68:63:E6:84:90:F4:DE:2B:4D:67:11:51:EA:42
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584A9A6635465CF02F27FA7FE6C0
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     400861
IP address blocks:        2602:2da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:35:46:5c:f0:2f:27:fa:7f:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=9d4dcf79-cc14-48a0-b242-c988859da830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:f4:fe:9c:af:10:cd:7c:4d:c4:f1:22:37:
                    15:66:24:e8:91:36:17:91:8c:b6:7a:e0:e7:47:cf:
                    86:fc:d2:05:f8:4a:94:0b:2c:b7:ae:a1:8e:2a:e4:
                    17:05:f2:c7:15:50:95:3e:8b:b3:1e:b5:fd:42:e7:
                    1e:80:08:26:eb:94:cc:36:8b:d2:78:64:a0:8a:25:
                    c1:7f:7e:9b:da:22:0b:f7:de:c1:64:27:37:1e:fa:
                    d4:18:79:32:b9:b4:98:0c:27:eb:41:af:2e:b2:67:
                    b7:74:0d:27:4c:5d:86:eb:21:07:65:c5:68:60:77:
                    d8:f4:00:6d:02:23:55:5a:41:62:d6:3e:57:a6:30:
                    74:d5:74:01:28:88:27:4b:5b:d0:9e:02:30:d7:13:
                    af:9a:5d:c9:5b:bb:f1:28:15:8d:a4:20:17:e8:d8:
                    50:e3:7e:07:ec:08:6b:fb:d4:e0:8e:2d:ff:a4:27:
                    a2:d7:71:ea:73:c5:7b:74:99:b4:ed:1b:b8:82:36:
                    cb:a3:c0:60:d9:e7:e2:00:50:4d:a0:99:ca:3b:dc:
                    8a:09:85:7b:f0:62:4d:9f:7f:b1:7b:9b:e4:f6:dc:
                    ef:ea:a1:79:7c:9b:38:61:40:74:d8:30:05:11:08:
                    2b:8e:52:b8:94:d3:e8:48:ec:40:ce:b4:45:26:e5:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:48:D6:32:13:68:63:E6:84:90:F4:DE:2B:4D:67:11:51:EA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/fb61fbb2-966c-3035-9349-36a35742a9da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d6:81:b7:15:0a:51:84:55:e0:c9:db:37:e4:33:b2:5b:72:
         c6:62:da:6e:97:1d:98:3a:5f:34:76:b9:67:81:16:b1:e7:3f:
         bd:32:8b:ef:d4:bc:b6:b4:fa:aa:1b:2e:0d:77:f7:f3:b8:d5:
         28:01:b1:e6:3f:06:c4:28:72:bf:c9:32:4e:ab:15:a5:29:49:
         13:ff:58:be:f0:6b:d4:0f:e0:f3:00:02:7e:08:72:c2:23:ea:
         bf:4f:e6:54:72:b5:f1:24:5a:55:ef:d5:29:9c:18:1f:6b:98:
         d1:6a:53:e7:5c:c6:b5:f9:c4:96:8a:da:a5:e6:a9:a7:fc:c2:
         18:5a:2f:7e:66:23:dd:2b:4e:e9:96:b7:b8:f0:74:a8:33:81:
         8a:0f:7c:cf:70:52:32:b3:a9:12:f3:43:f7:ad:31:fc:6d:96:
         d7:01:5d:da:dd:06:c8:68:bc:d3:f8:4a:4b:ba:3b:9a:8b:37:
         a9:38:66:f7:e2:a8:f9:d6:8e:7d:63:f0:e8:13:1b:3b:26:34:
         f3:81:0e:57:4d:af:53:ae:38:c8:4a:f6:f7:fd:fc:05:95:52:
         41:60:a4:4d:2b:de:d1:26:15:67:de:85:0a:2b:4b:95:54:25:
         bd:84:85:58:d2:a9:14:d2:89:69:81:43:b2:4b:40:bd:66:ab:
         39:b4:3c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:46 2025 by rpki-client