Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/1542cac2-8fa9-3e60-a646-0e3eca5da55f.roa
File:                     1542cac2-8fa9-3e60-a646-0e3eca5da55f.roa (raw, json)
Hash identifier:          NCS5epOFpRAuEDNID4aBMoFayjxvVAEiY+LgKUovO/0=
Subject key identifier:   A2:79:42:8F:8F:78:4A:5A:78:A8:B3:46:7B:5F:A0:7B:A1:9D:A5:32
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584A8575FD4597AC0E23D0038A80
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/1542cac2-8fa9-3e60-a646-0e3eca5da55f.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     197815
IP address blocks:        2602:fa92:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fd:45:97:ac:0e:23:d0:03:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=8f9b2c7b-e0ae-48e3-b3df-970b74f53f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:0f:6d:82:31:a9:9a:e3:47:fe:dc:1e:46:
                    e4:e4:be:aa:8a:32:e1:4a:6b:8c:9f:cf:ac:6d:ea:
                    17:11:d7:5c:18:12:48:3a:8c:61:40:fc:62:26:3b:
                    8e:47:ac:51:b9:c6:4a:47:26:39:ce:b7:76:3a:72:
                    8e:c6:ce:e4:30:44:70:da:ad:e3:79:2a:34:5f:06:
                    e2:42:fe:f9:9f:87:90:8a:99:35:09:7a:67:f5:8d:
                    3a:3b:fd:cf:0f:27:52:01:17:5e:06:f0:15:9b:37:
                    60:f1:1e:fa:c0:c7:3d:a2:cc:0f:3f:82:5a:63:3b:
                    2d:91:04:17:f7:38:a5:2f:ec:c4:b8:c7:11:1f:bc:
                    6e:47:d1:b8:a0:c4:f6:21:6a:7d:52:39:60:9d:63:
                    cd:56:96:ee:3e:8e:72:84:1d:a6:a9:c2:e0:9d:3f:
                    8c:65:9e:0c:ff:c7:e2:a5:a8:34:8d:e8:28:6a:41:
                    69:05:5d:15:78:a7:29:42:cd:39:bc:2c:cb:1e:a5:
                    a1:5a:93:c0:52:d0:02:8c:60:a4:bc:0a:d7:b2:31:
                    ad:af:75:42:70:ac:ac:bb:8f:80:f0:f7:25:6f:97:
                    60:66:8a:e1:e5:24:70:a2:d7:eb:57:b5:83:ac:40:
                    32:1d:cd:20:b1:11:b6:45:7a:82:82:d2:ce:57:34:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:42:8F:8F:78:4A:5A:78:A8:B3:46:7B:5F:A0:7B:A1:9D:A5:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/1542cac2-8fa9-3e60-a646-0e3eca5da55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:12:68:03:8c:92:4d:03:b1:50:35:a7:45:9c:91:bd:73:0a:
         56:24:bb:93:58:aa:37:cd:d8:7c:6e:dd:7d:6b:21:20:40:50:
         b7:fe:0b:60:14:b5:33:23:58:27:59:9d:89:e6:0e:f4:90:4b:
         bd:6d:ab:49:b7:08:0f:4f:58:18:cd:f5:d7:9b:76:9f:4d:01:
         54:a5:52:bb:10:24:11:ef:5e:bc:82:92:0d:58:2f:46:22:53:
         1f:89:c1:c6:14:3c:82:bc:51:6b:8b:c1:66:3b:2e:fe:46:97:
         89:01:b2:ba:b5:2f:c3:b3:3f:1c:bc:7c:0d:bd:e5:10:e5:1a:
         65:18:36:82:ea:b1:ba:eb:f5:a1:74:8f:e8:2f:95:31:11:14:
         6b:9f:b4:59:ff:b4:56:1c:8e:f6:e5:b6:ff:25:49:e8:0f:8a:
         c6:cb:33:00:b6:44:44:88:49:fb:64:e3:d6:b7:8b:60:5d:1a:
         76:82:52:46:d1:7e:98:f0:e9:19:51:87:84:e4:c3:c5:d0:69:
         48:58:48:bf:b2:51:2c:04:2f:6a:2c:4c:f1:4c:17:25:d2:e7:
         23:6b:49:37:05:6d:4e:44:17:eb:d1:4e:ea:77:17:51:42:a3:
         95:ae:47:09:fb:ae:b7:71:81:53:d0:a5:6e:db:dd:24:30:98:
         45:8a:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:55 2025 by rpki-client