Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa
File:                     02f7900b-4251-375f-870d-3940bd4d4331.roa (raw, json)
Hash identifier:          RAw94EkC/pk/fNZDtn5mW1OoAZ3wsSBi1Y4HlRew5Go=
Subject key identifier:   0E:00:CA:C1:3A:14:09:6B:E8:59:DC:8D:73:AC:C6:44:34:AE:B9:73
Certificate issuer:       /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Certificate serial:       010D0C9F4328584A94D0CCA8BC661987AE264080
Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     216360
IP address blocks:        2602:f869::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:cc:a8:bc:66:19:87:ae:26:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=cb80a120-1217-44ed-baf8-621e24bf0fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:3e:84:6a:5b:43:62:c9:e3:aa:5f:23:ff:
                    a7:41:19:c1:27:1e:b6:33:54:3f:f1:31:5d:4c:e1:
                    60:c8:fb:a5:c3:e6:26:fb:30:19:e4:c9:69:63:15:
                    a4:f2:7f:72:4a:36:12:d9:40:9d:f1:5d:f4:35:10:
                    08:bd:66:f6:09:32:cd:fe:72:5f:53:de:21:97:4b:
                    fe:fb:46:c4:53:a0:dd:b4:59:6b:96:dd:41:95:e4:
                    e6:aa:61:6b:1a:4d:2a:1c:1f:a7:8e:ad:65:29:4f:
                    6b:5b:87:a7:5b:6a:08:47:da:23:23:c9:d2:09:2d:
                    eb:15:48:fc:a9:ba:72:51:19:d4:1f:fb:4f:62:9b:
                    ac:97:66:c3:d9:1a:ef:f9:e9:1c:fe:5a:2d:bd:28:
                    f1:7b:79:98:2b:bb:0f:0f:d5:67:df:e3:dc:72:b6:
                    4d:98:51:0b:c4:17:f9:82:2c:b8:26:25:dd:87:b6:
                    8f:69:01:6b:81:13:61:71:c4:d8:7a:48:eb:0c:bb:
                    a9:db:48:f7:8b:1c:07:97:95:63:44:6c:a3:9c:2a:
                    27:77:a8:dd:a4:bc:8c:42:8b:1b:af:d9:3e:3f:52:
                    92:cc:85:cf:0a:9f:eb:d1:2a:3c:af:31:a9:a0:32:
                    5b:14:01:51:2a:28:63:df:75:a0:37:d5:29:ba:36:
                    a5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:00:CA:C1:3A:14:09:6B:E8:59:DC:8D:73:AC:C6:44:34:AE:B9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl

            X509v3 Authority Key Identifier:
                keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f869::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3b:82:07:a1:bd:ff:db:7b:a2:0b:1c:b9:1c:fa:ba:c7:ef:
         64:a1:31:1d:ea:cb:86:de:a1:bf:9f:1b:e0:f5:bd:7f:76:0d:
         67:83:65:35:9b:a8:a1:0c:b4:6f:1c:dd:35:97:d8:79:29:f7:
         ce:64:62:c4:ae:78:56:77:a2:53:5d:90:95:e2:ec:d9:cb:f9:
         ee:1e:b9:07:a3:45:01:d1:4a:0f:3e:b3:ac:55:b2:88:a5:40:
         4c:37:47:39:41:1e:d7:d5:c9:7f:dd:a8:50:97:1c:c5:63:78:
         0c:c0:fb:94:b5:26:f3:a4:61:a2:f1:a6:98:75:5e:6f:01:50:
         f0:52:92:f4:4e:e5:93:0b:74:b9:e0:2d:cf:05:b0:64:67:bd:
         f1:04:31:0f:2e:3a:66:61:2d:af:7a:4c:78:f9:fb:66:77:71:
         ac:2c:10:bf:46:69:85:8a:01:56:66:14:65:a9:dc:43:52:c2:
         35:7f:61:43:45:df:e5:f5:e0:33:af:3c:89:c9:38:b4:37:63:
         92:88:ec:6f:fc:6d:96:21:c0:17:8b:dc:6c:62:8a:65:da:19:
         93:c2:32:0e:4a:f1:4d:c1:0f:4b:b4:f3:14:9b:3e:f1:f8:54:
         08:0e:45:3d:0a:02:3c:a0:9e:47:7d:e6:21:07:2a:7c:f6:55:
         f4:4f:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:37:25 2025 by rpki-client