Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
File:                     7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa (raw, json)
Hash identifier:          69BdaV16zwxad0Soxz4kmlZ31Fdxfl43CQDYCQy/XiU=
Subject key identifier:   6B:0D:FC:DD:55:D4:41:C5:C3:A4:2E:71:E8:03:21:F1:B9:D3:F6:41
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213F9649461E493FBDCD80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20a2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3f:96:49:46:1e:49:3f:bd:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=351a8ca4-d5d2-4219-b077-7170e8638a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:98:4d:ed:2c:fa:1a:77:6f:aa:3f:77:cb:
                    92:d0:49:8d:57:ce:31:69:e6:f0:d7:0b:69:36:24:
                    06:7a:a3:d9:b4:59:92:89:6b:c2:34:4a:7a:bc:a8:
                    ec:fc:07:3a:6e:77:19:51:5f:3e:de:69:03:de:67:
                    f4:6d:01:8c:6c:73:2f:65:8f:00:96:c2:f0:7f:b5:
                    1a:51:f2:dc:f0:8b:6e:e5:19:10:d9:15:fe:3e:58:
                    2f:f8:cc:b3:64:7e:4b:36:da:4f:84:8d:42:6f:03:
                    a7:5a:65:2d:a4:90:59:f5:58:09:1e:46:4e:4f:99:
                    12:00:16:f2:d1:bd:e2:be:70:68:87:e1:de:a5:46:
                    2b:37:01:f1:8c:59:38:0e:de:d2:51:4f:c5:86:ef:
                    cd:39:48:a0:88:2a:3d:7c:14:2a:56:29:52:63:58:
                    eb:e5:96:39:aa:d9:32:7c:e0:58:be:3c:bd:93:3c:
                    79:6f:d7:41:11:90:9a:45:8f:f0:90:d5:ca:f7:8b:
                    e9:63:08:5b:fb:cf:28:4b:2e:8e:43:57:44:83:7d:
                    2e:fb:da:c7:85:43:92:a4:d2:f5:3e:aa:38:93:0d:
                    93:6e:c2:75:52:56:69:6a:46:03:04:7f:ae:f1:fb:
                    e5:4d:da:ee:92:fb:fe:fb:81:84:08:0d:22:39:22:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:FC:DD:55:D4:41:C5:C3:A4:2E:71:E8:03:21:F1:B9:D3:F6:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/7bd6da4e-0b36-374c-8030-ea7a3f82707e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:a8:4d:f8:fd:60:e6:df:70:7e:a0:92:a1:7e:38:dd:72:
         68:1f:49:8e:01:00:7c:ac:9c:c6:37:0f:91:e2:38:1f:f2:9a:
         a2:eb:f6:c5:c3:3f:d2:5a:dd:76:9f:4f:17:ef:89:2f:7f:e8:
         95:58:4e:ce:ba:17:60:a3:da:df:6f:0e:20:d7:10:35:8c:14:
         25:52:f5:76:fc:2f:76:6c:57:94:be:84:66:bf:20:74:c5:e8:
         36:de:0d:ad:03:64:23:52:bb:f0:f5:bf:be:8a:42:05:bb:4a:
         e6:97:24:74:ba:03:e0:1c:ad:a2:d8:90:d7:df:b8:1e:95:71:
         0c:b0:4b:d6:82:d6:ad:cc:85:29:4c:b0:fd:4b:f3:f4:07:6a:
         fa:37:f4:15:13:fd:7e:f9:92:0e:4b:4e:46:70:fc:d3:da:0e:
         18:2c:15:de:a5:72:35:ae:fe:af:da:fe:a0:08:52:0f:fd:da:
         53:22:57:4d:25:e5:d0:6b:6f:a6:a9:58:29:5e:86:3f:32:16:
         d2:5f:d2:20:ea:f9:fd:e9:77:ae:9e:8a:8c:0a:a7:a1:02:a5:
         d1:f9:37:ca:87:02:aa:eb:32:ce:d9:0c:cd:49:fa:79:51:62:
         e5:5a:97:a5:e9:aa:90:d3:52:93:64:13:09:5f:26:6d:e7:38:
         aa:ec:51:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:31:27 2025 by rpki-client