Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4f513765-4594-3b05-b30b-a0bea5f0be8e.roa
File:                     4f513765-4594-3b05-b30b-a0bea5f0be8e.roa (raw, json)
Hash identifier:          erazdGqD5zWF5DhC61wmsHPT4B/Dl/8La5UpV20c+mI=
Subject key identifier:   A5:4F:82:62:E0:47:67:C2:C2:41:42:E3:70:F8:22:80:5E:B3:4A:02
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF52141FF3549B3B39D624080
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4f513765-4594-3b05-b30b-a0bea5f0be8e.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20c6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:41:ff:35:49:b3:b3:9d:62:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=85336868-c5b0-4858-9dae-cb558313a414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:9a:b8:93:8c:49:35:38:fc:89:cb:f5:5d:
                    6e:f5:bb:f4:42:bc:df:39:c6:c9:60:75:96:f1:0b:
                    02:39:b6:9a:28:c3:ac:14:1a:27:94:9e:56:d2:32:
                    8f:04:71:1b:a0:9e:9a:ed:70:78:8f:ae:82:45:97:
                    05:e0:85:34:38:cb:e4:ee:c2:57:56:0c:0c:ad:80:
                    a7:81:7c:58:46:3d:68:a7:ef:30:7b:d6:6a:94:c7:
                    eb:4b:06:f9:16:b3:e0:f0:f7:6f:56:d9:ef:09:1c:
                    39:ee:dd:81:68:a9:c3:6f:39:ff:f4:f1:fb:63:40:
                    12:f2:67:53:66:f0:0d:ad:ec:51:b9:e3:c2:60:d8:
                    6c:ab:a4:86:78:54:ed:c7:28:08:c3:b7:0e:2b:0d:
                    e9:46:d7:35:40:7e:9f:96:31:7d:63:4a:a5:fc:5c:
                    27:a6:e3:9f:b6:f6:c1:c6:8d:4d:23:c4:4c:78:65:
                    b3:18:38:e7:73:0c:4f:a8:13:57:ba:ea:97:fd:cf:
                    12:6c:5d:25:02:87:56:85:1b:48:9c:98:63:3f:d9:
                    26:41:70:c4:e9:2e:07:34:0b:74:68:7e:33:af:5b:
                    8c:4d:12:bd:1d:6e:30:d2:37:76:e1:30:ee:9e:ac:
                    eb:72:d5:bb:19:f0:15:ae:7e:95:5b:3d:78:ca:2b:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:82:62:E0:47:67:C2:C2:41:42:E3:70:F8:22:80:5E:B3:4A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/4f513765-4594-3b05-b30b-a0bea5f0be8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:85:0c:99:41:2a:fd:0b:c5:9f:ef:ac:d6:df:fa:49:c7:81:
         38:ea:04:05:b0:5f:39:d5:09:46:2f:ec:c5:4c:88:af:cc:ca:
         6d:69:8c:08:0c:30:e4:7a:87:25:34:1d:9b:b5:c0:7f:35:21:
         33:c7:9b:af:68:ae:82:54:79:ed:49:9e:79:a1:d7:41:bd:8e:
         0d:8d:ba:bf:b1:6d:ce:74:17:66:93:49:2f:5e:63:91:26:07:
         a4:57:5d:87:87:c5:06:42:86:89:52:2f:e3:98:c9:59:e5:e4:
         e6:2f:12:ca:19:d6:77:63:6c:0a:1d:2a:78:7d:39:b7:c4:c0:
         7b:ff:41:2d:0a:d2:14:a5:e2:07:3b:a7:67:87:42:8d:b9:4b:
         4b:41:11:61:32:a4:20:5c:14:f9:58:c8:df:37:03:f7:8a:d2:
         18:bb:dc:8c:d0:31:ef:e9:99:38:e9:7a:d4:9e:aa:01:6b:0f:
         55:c9:42:56:70:76:3c:e4:ea:94:39:34:86:bd:25:aa:f0:e8:
         e8:12:05:3b:7d:92:8f:dc:82:bb:ff:78:ee:6f:99:e1:ba:d5:
         5a:a8:cd:81:41:22:bf:20:6b:0c:ee:72:c5:a5:86:ad:23:82:
         63:50:df:84:b9:c9:3f:34:2b:2b:f2:cc:11:ac:96:10:03:58:
         60:c8:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:39:32 2025 by rpki-client