Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
File:                     b5688e20-5a18-31ad-8912-33c14a17342f.roa (raw, json)
Hash identifier:          Lq2eu2YeC7N8gxTveBWbVtUezRd4FNQKXVzCiQR/hDU=
Subject key identifier:   E4:3C:29:CF:36:15:1F:EF:05:F9:D6:08:BE:C0:35:74:3F:19:7A:70
Certificate issuer:       /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial:       010D0C9F4328584B047C172CFBA177323E2F6A80
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:f86e:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:17:2c:fb:a1:77:32:3e:2f:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=3e6af161-edaa-4dca-a185-1aaf42e497b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:d5:71:f8:9c:30:4a:a2:30:31:35:56:3b:
                    94:e8:5f:61:d0:54:15:ee:62:8e:9d:be:32:e7:06:
                    10:4a:95:70:74:4c:5f:47:4c:71:a2:b7:67:d3:33:
                    56:e1:71:16:b9:64:7a:91:89:c5:31:c3:2c:ca:59:
                    be:99:07:0b:ce:d1:3d:a1:ec:ab:68:bb:4e:c2:15:
                    2f:f8:e6:11:af:b2:28:a4:2c:7c:11:d6:d8:16:a2:
                    aa:83:a8:3e:ae:17:84:29:11:f9:35:f8:29:17:d5:
                    d0:02:bf:78:e3:fd:b9:98:ae:66:2c:54:e0:50:c2:
                    e2:71:3c:9e:3e:77:54:fa:01:58:bb:01:c5:d6:9f:
                    1b:ff:2a:01:0e:6c:d9:e5:c1:21:f3:cf:58:2a:d2:
                    23:08:16:1c:70:17:d0:a5:7c:8c:ac:4e:f2:dc:7c:
                    ef:2b:ef:8f:af:e6:fd:fc:f2:8e:dc:be:d5:c5:75:
                    dc:0a:60:d9:af:f7:2f:ca:17:80:9c:6d:53:cd:b8:
                    b3:70:d4:35:dd:25:34:f8:e4:fa:bd:4e:28:83:33:
                    a8:dc:d8:3d:32:da:5f:91:a8:d4:35:79:45:69:77:
                    ff:c5:12:dc:d2:8a:a9:2c:6d:b7:d7:07:6d:27:18:
                    88:70:36:15:0f:93:62:18:82:49:48:ee:7d:d9:60:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:29:CF:36:15:1F:EF:05:F9:D6:08:BE:C0:35:74:3F:19:7A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/b5688e20-5a18-31ad-8912-33c14a17342f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl

            X509v3 Authority Key Identifier:
                keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86e:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:71:32:27:6e:3c:79:5f:21:49:fb:96:fd:5f:cf:46:0a:
         bf:c5:b1:da:5c:b7:c5:76:ed:5e:0f:4b:bf:3a:33:e1:49:12:
         5b:f1:6b:68:dd:ce:59:88:e2:e3:ae:82:0c:82:ca:86:97:ea:
         6d:40:95:31:fa:e4:78:03:6a:b1:2d:d2:1c:3b:f9:83:c1:de:
         ae:78:e4:99:27:1a:54:57:0f:b2:58:27:6f:93:cc:01:c8:fd:
         89:4a:51:29:32:0b:30:b7:f7:24:68:4f:d5:08:78:86:90:06:
         67:c1:7e:ee:61:33:df:e3:6c:38:82:62:ff:ca:1b:a5:a7:2b:
         b5:7e:de:11:ad:d5:89:90:d2:f5:59:fc:1b:2a:ca:aa:ea:1a:
         ac:a7:9c:34:ab:e0:41:72:54:9c:d4:22:f9:a8:89:6f:f2:4f:
         92:91:28:1d:2c:a8:20:9f:aa:1c:9b:cb:b9:8e:aa:2c:bc:e4:
         ad:58:c7:b8:72:39:1d:d7:bd:4f:51:4e:55:f2:0c:f1:2a:5a:
         77:c7:3f:04:b0:7a:ba:98:a6:32:9c:cd:53:4d:b9:08:8f:5a:
         7c:38:ae:fd:90:40:6a:0b:91:8b:41:cc:62:91:de:7a:f1:43:
         db:0e:5c:77:c2:e6:cd:2b:06:ea:56:85:de:a2:dc:7a:82:01:
         2a:cf:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:14:01 2025 by rpki-client