Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/f7e583ba-0101-3318-a4bb-89a479656c0a.roa
File:                     f7e583ba-0101-3318-a4bb-89a479656c0a.roa (raw, json)
Hash identifier:          QbGhPrIUyWQd9qiI5ypXP8GZ2ljb4DNmfBW4SRwUnTE=
Subject key identifier:   9B:EC:F6:14:0B:9E:D7:7D:B2:F3:81:99:98:C3:DC:0B:DF:12:1F:5E
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584AA85BA8B0DB2FFC0756069680
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/f7e583ba-0101-3318-a4bb-89a479656c0a.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     397131
IP address blocks:        2602:fe6a:aaa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a8:b0:db:2f:fc:07:56:06:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=aba25ec9-dc2d-41e8-a3cf-a986fa9e5297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:95:59:8b:00:26:a5:f1:ce:88:5a:db:d4:
                    6c:58:32:62:49:d0:55:dc:10:bf:93:ea:1e:7c:07:
                    0e:a5:80:ad:ab:a4:61:1b:f2:b6:ba:fb:cc:ea:6d:
                    81:89:40:3c:94:8f:50:4b:48:bd:aa:e1:09:fb:1d:
                    37:9d:17:ae:c6:9c:8d:44:83:dd:70:aa:1a:81:1c:
                    3d:9b:28:54:32:f6:59:7c:4b:fe:61:dc:bf:4f:8b:
                    e3:87:80:b6:74:d1:8b:55:8f:9c:bc:85:79:b0:c2:
                    47:5e:ed:c8:f1:8a:90:07:07:c0:45:84:ac:8c:d3:
                    b9:4e:d4:bd:9b:2e:f1:16:73:7a:63:ed:d7:9f:4e:
                    13:0b:83:c4:54:10:0c:93:c7:d0:f3:a7:d9:fd:c5:
                    a8:c5:4c:ed:f2:50:f5:4f:1a:80:08:ec:44:67:ea:
                    92:0f:8b:b6:e9:37:65:07:3b:9a:d5:63:21:3f:0c:
                    47:37:b7:8d:11:dd:bd:b3:04:40:c5:1e:ac:30:be:
                    b6:2e:34:af:de:55:49:e7:11:5b:82:30:08:3e:1c:
                    b2:11:4f:d9:f9:fe:47:fe:b1:e5:3c:36:52:2c:e0:
                    bd:fd:ed:60:54:bb:94:f7:0d:02:14:5a:7e:86:a7:
                    d6:f2:21:eb:be:7a:93:c2:c6:04:3a:90:20:e0:7a:
                    97:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EC:F6:14:0B:9E:D7:7D:B2:F3:81:99:98:C3:DC:0B:DF:12:1F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/f7e583ba-0101-3318-a4bb-89a479656c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6a:aaa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:4e:52:db:83:41:b6:f3:b4:85:b7:2f:18:8a:ad:3c:cf:
         48:5c:b3:62:aa:2b:2b:38:68:0c:53:fe:b4:71:ff:a4:6f:69:
         08:ce:3e:4b:a0:76:29:10:e6:85:33:be:f9:e7:e7:cb:82:7a:
         05:46:a5:1f:1b:4b:2f:d0:3b:c1:fe:b5:89:b5:56:9e:24:18:
         4a:38:50:d8:6f:9f:c4:90:05:64:91:53:50:18:0a:51:b6:9c:
         c8:c3:6d:df:1e:43:00:a0:b2:e6:c7:37:44:fe:0b:ee:41:e3:
         ee:8a:f2:25:55:ad:be:56:e8:3d:3d:f7:02:ac:c8:e4:e4:cc:
         b4:82:e0:1a:b1:66:b0:61:17:aa:d7:7c:28:04:32:de:ad:66:
         df:25:b4:c0:06:02:41:ed:a1:62:72:34:cc:9a:b6:87:41:48:
         d4:8e:12:21:58:b4:fd:23:d3:d7:6d:85:9a:11:c7:89:a3:85:
         ab:b1:3d:63:63:e9:53:16:71:59:09:0a:dc:19:65:50:38:d5:
         82:fd:fe:e6:a6:09:02:b6:81:cf:47:ce:dc:0e:ff:5f:43:d9:
         23:93:f7:d1:12:44:60:f0:ab:99:b3:05:a1:61:e3:72:4f:68:
         6f:9f:10:d1:53:60:c9:0f:cd:6b:3f:93:d4:04:78:ea:31:7b:
         b1:7b:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:45 2025 by rpki-client