Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa
File:                     d448082d-cd50-3239-a0de-def50b3efab7.roa (raw, json)
Hash identifier:          pAx1zqRemlFrxbQStP0HxI4shfEZZ5+mnrLMtzyznmo=
Subject key identifier:   CF:47:22:FB:53:A7:3E:DC:C8:3D:83:A4:10:01:2C:C8:96:99:12:FC
Certificate issuer:       /CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
Certificate serial:       010D0C9F4328584B610D8AB8E2883E97A2D9B000
Authority key identifier: 78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa
Signing time:             Wed 01 Oct 2025 16:48:24 +0000
ROA not before:           Wed 01 Oct 2025 16:48:24 +0000
ROA not after:            Tue 30 Dec 2025 17:48:24 +0000
asID:                     27520
IP address blocks:        2602:f811::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:0d:8a:b8:e2:88:3e:97:a2:d9:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acfcd76-bb9b-4114-8b36-da9eee99b6b0
        Validity
            Not Before: Oct  1 16:48:24 2025 GMT
            Not After : Dec 30 17:48:24 2025 GMT
        Subject: CN=588f280d-50a0-440c-875e-dafc24c71ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:57:97:96:c5:43:c2:02:72:b4:99:1e:1a:
                    6f:fc:18:e7:aa:9f:4f:84:60:5c:73:b1:e1:89:29:
                    45:3d:bb:f4:77:ed:19:e7:2b:6c:a3:a2:1d:49:37:
                    7b:f0:33:f6:13:fa:ca:0b:be:2d:62:ca:86:a9:a8:
                    6e:09:2d:c6:90:25:b9:03:f7:f7:53:0a:32:61:7e:
                    2e:74:de:e4:2e:5b:03:c3:6e:21:85:8d:69:81:32:
                    9a:c4:45:32:35:17:6d:63:b8:76:1b:e9:1e:b6:ae:
                    bb:06:fb:37:95:5e:0e:63:a2:9b:d0:92:53:be:e7:
                    f2:a0:17:38:73:e8:e4:df:93:76:07:b6:ba:a3:60:
                    04:a7:39:03:a6:7d:43:46:03:8b:e1:f5:ee:87:2e:
                    10:71:72:7f:c3:90:23:65:0f:c9:12:c7:ce:8f:b1:
                    7b:57:9c:ff:09:9b:0c:d8:d6:9b:50:d5:b0:91:ca:
                    53:a5:3d:ce:23:d2:0a:43:ec:1c:03:a0:42:63:0d:
                    3d:cb:fd:1c:ee:e3:05:be:1d:e8:de:d8:85:e0:70:
                    b8:96:07:78:d8:86:8d:3c:73:5b:89:c3:18:46:e6:
                    9f:3b:f6:d4:28:c4:70:fa:4e:81:d3:be:49:55:6c:
                    6e:da:c4:d0:f1:ff:b2:45:f0:27:c1:fa:8a:2c:a4:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:22:FB:53:A7:3E:DC:C8:3D:83:A4:10:01:2C:C8:96:99:12:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/d448082d-cd50-3239-a0de-def50b3efab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.crl

            X509v3 Authority Key Identifier:
                keyid:78:70:8B:1B:D6:A8:84:C2:84:A5:0E:C1:28:9C:26:4E:F3:D9:4F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3acfcd76-bb9b-4114-8b36-da9eee99b6b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f811::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:91:5c:67:bf:2a:f1:7e:0b:ef:58:7f:0e:e2:ce:9c:01:
         92:f3:df:f5:c9:6c:be:0f:68:91:a1:ee:5c:4b:c1:31:67:c3:
         3f:90:7c:1a:db:ea:d2:83:2f:88:3e:86:07:c8:35:42:50:c5:
         90:3d:ef:29:bc:39:3c:d9:77:25:b5:2a:4a:68:c7:52:4a:0b:
         64:d2:3e:7a:4c:1b:a2:51:c5:49:49:04:89:16:16:f0:4f:87:
         22:e4:d7:69:10:65:3d:ca:ae:5e:03:4b:98:cc:03:64:75:fa:
         3c:95:80:37:0a:ea:31:eb:1d:91:d1:b2:9a:fa:a1:ac:92:5c:
         1c:02:8b:36:8b:02:87:63:58:86:9a:37:7c:7c:d8:63:b7:a7:
         26:91:0c:4c:b1:f5:07:37:d1:19:45:f3:8d:7e:26:90:2c:10:
         62:85:92:c8:07:bb:98:6a:f9:58:32:16:5d:8b:01:5b:9f:79:
         3f:e1:a8:be:a0:93:45:ae:12:26:15:05:eb:79:2e:59:41:4e:
         16:9a:c8:e4:09:03:91:99:d2:ed:4d:57:7c:38:50:34:88:41:
         23:63:ac:7f:05:36:b4:9e:b0:11:ba:13:48:3c:93:1d:f1:d3:
         a2:fd:ea:63:28:14:7a:3f:ed:30:aa:37:fe:dd:37:0a:85:40:
         35:d8:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:14:55 2025 by rpki-client