Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdad4c8f-ed43-362f-a859-b74300adb509.roa
File:                     bdad4c8f-ed43-362f-a859-b74300adb509.roa (raw, json)
Hash identifier:          X4tlWTfzwMEo+ch4gU4R86Qbw0B/NHm9xXzmNGwPkPk=
Subject key identifier:   24:55:10:16:E0:28:09:5D:DE:D3:E2:3C:76:E2:6E:63:2C:A3:0E:B4
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1612DD7A0B88285FA875980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdad4c8f-ed43-362f-a859-b74300adb509.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        2602:104:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:2d:d7:a0:b8:82:85:fa:87:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=4989d87d-e7b0-4738-afdc-8fb9ac7ca338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:0b:33:b3:68:51:97:58:1e:84:87:63:ef:
                    38:15:28:83:77:66:16:14:5a:ac:98:0f:70:1a:2d:
                    7a:7b:9f:71:46:3b:0f:17:09:e0:d7:19:9f:97:68:
                    8b:81:c0:51:35:18:07:22:f7:94:68:58:68:f6:2b:
                    fb:1c:0e:9b:5e:1f:ad:b4:ed:7a:a5:a0:4e:ef:f0:
                    3f:2e:e8:c9:3a:d6:80:f5:20:72:65:39:2f:45:4a:
                    f9:43:14:81:3a:cd:72:a5:56:33:28:47:62:91:49:
                    99:8e:98:89:54:ce:8b:8e:52:35:d8:3e:a5:68:33:
                    6f:9f:50:20:32:85:7a:25:6c:ff:12:da:5a:e6:bc:
                    c7:3e:fa:f4:0b:a9:04:c9:4c:6f:f8:6f:d5:69:5a:
                    78:e5:b8:b3:78:72:4d:92:5c:85:d1:e6:f2:e0:cf:
                    a9:1b:eb:fc:c7:40:31:4a:01:c8:c1:b2:33:19:8f:
                    af:78:d2:3d:89:0d:6d:9b:f5:d1:17:c9:29:8f:da:
                    f4:6c:aa:97:3c:9e:68:71:e1:61:29:8e:48:ca:5d:
                    80:5c:1f:84:4b:a7:63:1f:18:88:33:79:b4:38:d6:
                    9c:e7:e0:66:69:21:72:02:3d:d3:8a:e4:59:3d:e8:
                    0e:bf:19:ea:51:a0:72:f2:62:2b:d4:c8:93:5f:0b:
                    0b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:10:16:E0:28:09:5D:DE:D3:E2:3C:76:E2:6E:63:2C:A3:0E:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bdad4c8f-ed43-362f-a859-b74300adb509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:104:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:c7:bc:c2:ce:14:1b:45:2d:3d:15:82:5e:aa:55:bc:bb:
         5f:83:7a:fa:62:08:0b:24:5e:92:8d:b1:d5:16:df:90:04:e3:
         21:fd:8c:f6:63:bb:8d:16:7b:a0:67:8b:95:f9:85:4c:41:74:
         6c:e5:e3:4b:21:4c:03:05:6c:14:05:01:fc:a5:fe:a9:d0:d5:
         7c:8e:ac:87:5d:39:2f:39:5a:a9:c8:83:50:c6:1c:4d:df:45:
         7b:af:ec:d4:4a:4d:a1:9b:7b:97:ee:16:17:8c:4d:82:06:f7:
         60:c5:98:5d:a4:70:c0:b3:d9:d8:43:f2:3f:d7:45:84:ca:0e:
         d9:b0:80:bd:16:7e:3f:9d:6d:1d:7c:0e:74:a1:f6:60:7f:df:
         99:a5:0d:bc:3a:10:81:22:41:78:cc:09:c0:bc:5c:22:05:5c:
         51:c6:6f:bd:08:16:c7:97:ca:48:72:27:75:3b:79:75:00:6b:
         79:d0:3a:0f:9f:18:8b:42:5b:1e:6b:ba:35:7f:2c:9f:bf:97:
         2e:cb:28:98:56:64:5f:d4:6c:4e:e5:25:55:00:b3:72:27:71:
         9b:c4:da:bd:52:70:dc:d2:a3:ac:64:af:03:39:be:2d:ff:bc:
         f1:37:d0:b4:2a:ae:f5:a4:2a:2c:37:9e:1e:96:81:f2:c4:37:
         42:4b:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:27 2025 by rpki-client