Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa
File:                     a0bf4502-4e24-3f1c-8437-9651062bd71c.roa (raw, json)
Hash identifier:          +UHyWiE8HPW4210E0Q/LfmMgxJ+MDdxoh+8eKFNQF04=
Subject key identifier:   F0:4A:66:68:30:9F:5B:71:94:82:B4:E8:94:D7:1E:C0:0D:C1:83:EC
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584A71EB2733797AD68C0DAB71A0
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     203236
IP address blocks:        2602:f92a:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:27:33:79:7a:d6:8c:0d:ab:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=c642b435-9296-494b-98ca-b1a7d0e6513c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:ad:3f:ba:ae:b9:a4:20:2f:38:49:f5:6c:
                    0d:69:5f:a4:89:ad:53:06:03:26:5c:8b:9a:78:29:
                    8b:78:72:0d:ca:ca:17:8b:f3:f7:1a:e0:0d:b1:fb:
                    cb:99:83:69:3d:e3:0c:31:f7:90:cf:74:8d:15:18:
                    c1:19:ef:2f:ac:33:8a:5f:e2:72:60:48:3c:7e:ec:
                    8b:48:a1:b0:48:f3:91:c8:86:71:67:3b:48:f8:db:
                    47:5b:61:b6:58:71:79:a0:31:f3:4e:2c:67:11:3c:
                    b1:cc:a1:33:bd:00:a9:2e:cb:5d:16:22:21:3e:3e:
                    33:99:9d:43:29:c5:3b:f4:7d:48:30:9a:fd:6d:26:
                    06:f0:ef:df:e2:0b:3a:2d:3a:8a:d8:78:96:df:db:
                    74:f8:50:ea:db:96:25:6f:98:8d:dc:ee:ec:04:b0:
                    aa:d1:0e:c5:6a:f1:77:eb:08:ef:eb:12:25:45:a7:
                    93:79:de:14:19:7a:ed:97:c1:35:00:4f:51:85:33:
                    62:54:33:65:68:c5:19:5e:cd:7a:8f:9f:21:2f:c2:
                    4b:11:e3:14:c2:92:60:f4:c5:a9:b5:7d:c3:60:20:
                    73:91:81:fb:f1:8d:98:51:a4:79:3a:5f:4b:0d:af:
                    b8:37:5c:e3:1b:b7:f7:1c:87:1a:3c:2a:63:55:49:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4A:66:68:30:9F:5B:71:94:82:B4:E8:94:D7:1E:C0:0D:C1:83:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/a0bf4502-4e24-3f1c-8437-9651062bd71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:93:7e:e7:3e:c0:ad:16:0b:7f:e8:7f:d5:26:96:2e:39:b6:
         a8:2f:d3:f4:f7:0d:13:23:75:88:89:f5:8a:f5:33:9f:f0:bf:
         72:5d:1f:25:42:11:c0:d9:d0:76:f4:c1:88:c1:e9:07:fc:bc:
         51:39:c8:8c:01:75:75:28:51:1a:6a:e6:f6:43:2f:f0:64:89:
         c9:70:6b:ae:cd:87:d0:e2:82:9c:34:b4:8d:22:e2:22:f4:31:
         33:08:ef:5c:ba:d3:c9:22:2f:b7:f6:73:0c:24:a5:dd:f5:1b:
         d3:87:0b:c6:55:b4:6b:48:ea:dc:9f:26:15:48:c5:12:7d:34:
         d3:24:f3:66:b8:50:b0:40:6c:21:6e:a1:62:00:48:2c:70:43:
         c4:5e:f7:19:20:18:b9:80:49:ed:93:da:31:e7:37:e0:d1:aa:
         59:70:12:18:15:e6:69:86:a1:6b:92:30:4f:0c:2b:e1:f1:76:
         be:61:15:7c:db:f7:0c:81:2b:0a:fa:9b:3a:a9:4e:a6:d7:77:
         6f:ee:e5:58:14:7f:0c:84:cc:f8:76:24:b3:e2:04:50:b0:5b:
         f2:56:64:ec:b1:df:99:3e:5f:d3:93:95:32:94:96:f9:da:0d:
         fb:f3:73:bd:55:24:94:29:18:d6:16:31:46:6c:c6:a0:31:4b:
         67:aa:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:23:08 2025 by rpki-client