Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa
File:                     625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa (raw, json)
Hash identifier:          IgdM5ybzmPZsFXZESLErDs5JT2xA87Z/2mFdh2kuSwo=
Subject key identifier:   5D:8B:82:D8:99:5B:69:DF:D8:C8:8A:65:50:71:51:A6:6C:05:9A:93
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584A90A0BE085DE998934DB57A80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     38047
IP address blocks:        2602:f83b:a886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:be:08:5d:e9:98:93:4d:b5:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=364a1e53-8358-4aa1-bc7b-c7eb3883b438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:b6:69:f8:6f:24:a8:15:db:da:0c:12:61:
                    92:d8:a0:1e:14:0d:50:e6:b1:f1:81:ed:d0:6b:87:
                    c5:35:d8:9a:8c:96:c3:64:5a:ff:fa:4d:4b:38:23:
                    6b:4c:10:6e:77:e6:99:f8:bd:80:b9:9f:f1:cd:e8:
                    51:9d:d7:f2:73:eb:b6:f7:c3:3f:68:49:6d:bb:69:
                    b3:2b:69:ed:3a:f3:52:e8:78:e8:b5:0f:50:d1:c1:
                    0a:e9:31:37:8f:14:0e:28:dc:43:06:b2:90:63:29:
                    ee:9a:23:d7:92:ce:4b:ff:3d:3a:f9:98:cd:0c:67:
                    61:82:ce:95:bf:b7:ea:32:f8:92:d6:8e:5a:1c:6c:
                    77:0b:70:3a:6e:5a:5a:24:cb:c2:01:0e:ef:bd:4b:
                    f5:96:66:0f:b6:56:86:52:e9:ab:a3:e9:f3:10:fd:
                    98:b5:00:73:a9:d9:6b:43:77:7a:35:11:20:17:72:
                    85:aa:c8:13:99:7e:ca:4f:c9:78:6e:67:d1:cb:9e:
                    fa:9c:be:ef:a0:86:ad:90:1a:c9:1a:7a:da:cd:64:
                    fd:86:4e:ea:65:24:ff:bb:7b:50:0a:6d:5a:c5:ff:
                    22:5b:52:67:9a:05:ee:ce:90:c7:f8:4b:28:6f:74:
                    6b:73:16:36:0c:73:35:b6:75:30:27:59:52:14:23:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8B:82:D8:99:5B:69:DF:D8:C8:8A:65:50:71:51:A6:6C:05:9A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/625ab4ed-3a48-3dcc-968c-fddd7ff4a936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:a886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:ac:3f:5e:ba:df:c0:14:f2:d5:4a:09:8b:44:73:08:9a:
         ed:e5:a0:17:94:cc:7b:57:0b:c6:b5:a0:01:8b:83:ed:aa:cf:
         2f:97:6c:9a:82:ef:16:f8:9c:c8:17:86:2d:35:9a:1f:b8:c1:
         43:c7:ff:0d:8a:39:01:14:13:a7:2b:3a:f2:c6:42:8c:9f:63:
         dc:db:fb:92:48:ad:38:00:f6:b1:7c:6d:c5:16:68:d6:bc:52:
         12:bc:3e:82:ef:75:ac:dc:40:e1:f8:cd:84:b2:a9:d3:38:21:
         51:37:b5:45:db:fe:c5:4b:5f:e0:0e:c7:00:fe:fb:60:22:37:
         d5:b7:02:a2:6b:db:12:7f:e0:27:6f:1a:01:52:4f:8f:09:ed:
         ca:b6:93:14:db:1d:4d:5b:e4:14:41:8e:2d:62:39:32:a3:ff:
         ad:b8:c9:7a:76:a4:a2:0f:26:01:9a:68:13:d4:20:88:b6:15:
         40:14:95:4c:ea:f4:e2:e1:94:4a:d3:f6:7b:ff:1a:24:8f:9a:
         9f:03:5f:3b:15:0b:c3:6e:08:28:8d:5d:93:be:91:e4:34:da:
         48:a9:91:df:d3:d5:21:dc:a7:07:03:14:c6:5e:71:f3:71:04:
         5f:79:64:0a:d4:cc:b6:c4:08:c7:cd:dd:2a:f2:f2:54:39:40:
         a4:25:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:56:30 2025 by rpki-client