Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa
File:                     c115ff87-fd17-32b1-a7ae-601215e11446.roa (raw, json)
Hash identifier:          4Y6sFodylLEfO9yKn8o39OxZbLe3TL6BCcnn7l6plmw=
Subject key identifier:   CE:84:16:7F:5B:10:39:64:C1:FF:F4:3F:20:AB:49:D3:7A:E9:BE:13
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584A7A4B3D91E118DC417BAB2680
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     211036
IP address blocks:        2602:fa92:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3d:91:e1:18:dc:41:7b:ab:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=b41882b5-16d7-46d6-8c89-3e321defd439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:ec:99:fc:13:4a:49:7e:50:53:a5:80:ae:
                    09:18:a5:88:bc:f8:34:da:a7:48:c0:05:74:6f:50:
                    3b:4f:9a:53:b5:67:8f:ba:b6:5f:cb:e4:ba:ee:8f:
                    8b:20:65:70:ef:a8:fd:14:16:c5:54:46:c0:dc:59:
                    2d:4f:8e:7f:de:c2:ee:e5:b4:8c:8e:1f:0a:b1:33:
                    63:2a:6c:3e:f6:83:e9:48:be:a2:bb:06:3f:11:56:
                    25:9d:59:f7:30:7a:0f:17:c6:af:00:d9:5b:22:b9:
                    c1:9b:c9:10:1a:2a:47:aa:ba:54:d0:05:fb:a2:9c:
                    ff:b5:3b:cf:45:fb:6f:07:31:74:9c:54:3f:52:b4:
                    2f:2a:0a:09:d2:c8:5d:1c:1d:fb:61:2a:72:eb:43:
                    b8:b6:9b:d8:44:6b:fe:52:92:48:37:7d:ef:ae:e2:
                    4a:f6:62:51:50:89:58:e2:70:83:ce:e4:70:a2:7d:
                    6f:e2:69:42:e7:42:4d:90:89:5c:03:ce:32:f5:6a:
                    54:34:c3:b4:39:fd:97:d7:c6:ee:35:21:9d:dd:34:
                    ab:89:3f:59:18:45:7a:e5:e6:d0:dc:a2:bd:af:9a:
                    31:14:51:3a:48:b2:52:b2:e1:96:bd:28:94:e8:6b:
                    3f:87:75:a0:6f:f0:d4:42:07:44:b0:29:b2:18:d4:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:84:16:7F:5B:10:39:64:C1:FF:F4:3F:20:AB:49:D3:7A:E9:BE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:d2:5e:a8:3c:f1:df:13:c1:51:7a:92:1d:29:0f:ac:4f:
         4d:54:d5:f8:c1:40:07:0a:3f:ea:3e:8e:81:85:dd:90:49:45:
         96:07:18:e7:c6:12:96:62:72:98:46:c8:5e:86:fa:72:0e:e4:
         8d:b8:2c:ed:11:53:66:6c:db:cc:cf:e0:ae:72:24:04:68:f5:
         96:57:72:b1:c4:87:62:a2:9e:58:cf:ff:c9:94:0e:ec:65:e6:
         e5:30:95:ee:fc:d7:13:0d:e7:ed:d3:8e:e6:88:2e:35:8e:ac:
         22:cf:6e:a2:77:b8:70:20:4c:8b:25:0d:d6:ee:11:7a:cb:0b:
         71:83:dd:1e:0e:20:5c:ae:1d:ba:65:95:cc:b1:73:69:ac:17:
         ce:f5:1e:4d:2d:32:06:fd:c4:00:c9:33:36:e1:04:09:95:95:
         a5:f0:d8:12:9a:64:ed:5d:84:be:83:86:1d:26:e0:c8:9d:50:
         d4:13:0b:6d:a9:a8:9e:f1:ac:09:ea:69:7c:e5:34:76:08:53:
         88:14:08:86:78:cb:2c:0d:39:c2:10:ef:25:70:7a:e1:b9:92:
         1c:97:a8:9a:0c:0b:d8:1f:48:1b:b0:d6:06:8f:28:7b:4d:4a:
         47:a5:75:fa:1d:ef:46:37:da:a1:90:7d:b9:d4:1e:b6:0d:d8:
         e5:9b:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:31:22 2025 by rpki-client