Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
File:                     d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa (raw, json)
Hash identifier:          7/P2aWXFV8MRzx8QOvnhmuQJ7PYLoljyrAgW/qcO+U0=
Subject key identifier:   EF:2A:F0:A3:F1:95:96:7D:5A:77:2A:F0:04:2C:28:80:71:FA:54:92
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F4328584A74B5CF6D58984EB75E63FA40
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     396982
IP address blocks:        2602:f708::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:cf:6d:58:98:4e:b7:5e:63:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=a9e9a8b0-4311-4642-b857-c03503ccfa7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:58:d6:c6:d3:c9:07:31:aa:b8:29:76:77:
                    68:be:e0:0d:cc:0b:6e:84:a8:99:2c:8f:c7:fd:1d:
                    69:d6:54:dc:de:fd:c6:ad:82:3c:41:5f:35:66:81:
                    02:a8:ca:ae:7d:7f:be:17:a2:e7:67:33:b7:4d:c0:
                    dc:63:b7:15:12:34:d3:03:ed:04:fe:dc:70:64:01:
                    79:83:5d:37:20:51:c2:0d:82:d1:17:53:d2:dd:c2:
                    d0:a1:83:51:80:24:0b:30:68:25:41:47:2e:7e:d2:
                    b6:ec:55:50:a9:06:71:d2:2d:fa:bf:2a:68:8a:69:
                    a6:ae:18:09:ba:fb:ee:83:52:e7:95:9d:b8:de:cf:
                    6c:00:95:9d:8d:30:7e:7a:6e:fd:89:bf:7d:8a:c9:
                    fb:b4:8d:4b:6b:e2:30:d4:1b:ff:11:ba:ec:4a:0a:
                    5d:2d:d1:24:b9:9a:5c:c8:c5:3b:95:31:b2:fe:9c:
                    1a:46:de:80:7b:af:9a:b6:91:9a:ab:96:51:0f:c9:
                    92:f9:db:60:de:89:4d:60:dd:29:9d:22:53:84:a0:
                    57:ff:63:41:75:ab:d6:eb:24:61:6d:c7:ab:e5:ee:
                    a2:f7:fb:ca:12:15:05:5d:1f:4f:90:41:33:81:cc:
                    f8:21:77:ca:d0:36:1b:9f:76:cb:5a:a1:a5:4e:5c:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2A:F0:A3:F1:95:96:7D:5A:77:2A:F0:04:2C:28:80:71:FA:54:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f708::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:98:bf:90:f8:40:09:3d:2c:49:23:ed:86:15:31:39:f5:
         f5:b2:de:48:62:34:b5:33:1c:98:8d:b0:e2:32:9f:6d:a4:50:
         d9:33:26:a9:50:00:45:44:21:09:0e:9c:7b:63:98:6e:c5:bf:
         23:ea:1c:53:6d:d1:6a:ab:83:ad:df:90:06:e3:6b:7b:db:ff:
         6c:48:cd:f6:30:07:e7:45:88:31:27:2d:cc:e3:f9:2c:f0:5b:
         88:45:46:3d:d6:89:01:ec:e3:cd:86:24:09:9c:49:13:87:da:
         4b:37:08:ff:73:49:db:8e:e5:2b:05:c2:7f:b1:32:a1:83:b3:
         89:97:8a:d6:6b:0f:12:8d:5e:ec:6d:44:dc:f5:64:a4:c3:c2:
         91:73:d4:21:39:ac:40:a6:d7:0e:18:55:c7:20:8c:26:cf:30:
         96:48:5b:6c:e3:94:7a:a5:14:69:1f:53:84:a3:c1:e9:a5:fc:
         eb:bc:b8:29:e0:97:c4:3c:4c:ba:0c:db:9a:2d:ed:1e:f3:af:
         a1:bd:b0:8b:96:7b:3c:31:c5:5a:73:14:06:a2:a2:3c:2f:e2:
         9a:9e:89:04:8a:81:db:8c:4c:b3:d2:79:ae:1a:4f:31:17:62:
         d5:4c:05:00:4d:65:89:bb:e1:7c:36:40:dd:8e:00:b7:f3:8b:
         18:6c:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:02 2025 by rpki-client