Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
File:                     a600e5cf-d500-321d-9338-5549b162eadb.roa (raw, json)
Hash identifier:          7CYSxBqGq8QfvJaav88DKDTU7FS+mp3AoV/4p2meOEg=
Subject key identifier:   65:BB:79:9F:1D:C4:11:8B:63:6F:F3:EF:55:6F:C9:C4:BF:C9:9C:24
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF521547904EE744F55345DC0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20ba::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:54:79:04:ee:74:4f:55:34:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=8f466ca9-0d02-41cb-944c-8be5131f0cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:6a:df:c4:98:8b:a4:db:b0:02:a8:67:db:
                    89:da:2c:76:61:e9:e1:b8:a9:4f:77:2a:3c:c3:15:
                    3a:57:c0:c6:c5:b2:b9:2b:5f:81:69:2c:d2:70:0c:
                    8d:ae:94:1f:fa:3b:db:cc:6a:17:6e:b1:99:23:48:
                    7e:0e:a5:7d:e5:3e:ab:8d:a8:78:18:07:a8:14:cf:
                    dd:f7:45:3a:6c:3a:b9:cb:84:03:d4:d8:fe:d8:ed:
                    41:51:98:47:58:4d:e8:7d:ff:02:c5:b4:9c:ed:e6:
                    02:60:a3:19:33:f2:bf:58:5a:e5:ca:09:ab:d7:ec:
                    4b:a9:2c:e6:b4:4a:2c:6b:cc:23:07:91:db:f0:c4:
                    fe:12:48:51:d0:d3:37:86:0a:b9:ef:14:82:02:89:
                    9a:d4:0c:86:15:b0:57:49:90:61:32:55:e9:35:00:
                    01:f3:98:8c:d1:d1:a8:56:81:df:6d:8c:b4:45:c7:
                    7b:08:0a:4e:0b:1d:26:3f:16:36:e0:e3:50:c7:c4:
                    ac:2d:76:e2:b7:c9:10:b6:d8:e9:86:bc:b8:1a:e3:
                    3d:25:56:22:99:39:89:75:b9:a4:85:26:5d:3f:9c:
                    52:f6:37:36:fe:7f:bb:51:e7:b9:25:3e:1a:84:0f:
                    42:80:6e:5e:fc:d7:8e:4e:0e:dc:06:cf:1e:e6:0b:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:79:9F:1D:C4:11:8B:63:6F:F3:EF:55:6F:C9:C4:BF:C9:9C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/a600e5cf-d500-321d-9338-5549b162eadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:d2:fd:d0:70:9a:b7:20:06:17:5b:b6:99:13:9e:92:43:
         b5:63:9f:d2:2a:46:a0:c4:3c:8d:48:46:1f:b7:a1:79:dc:21:
         6c:b5:2f:0c:89:3f:0f:f3:00:06:5d:8b:8f:65:a6:d9:df:b4:
         99:53:85:ca:cd:80:49:d2:b1:b1:85:15:58:d5:82:95:73:3e:
         7d:36:0b:01:ec:ff:0b:31:6f:db:88:29:45:0a:0e:57:06:2c:
         18:22:9d:1d:bb:9e:bb:2e:78:e8:5d:20:1e:14:51:15:49:13:
         2b:8e:58:82:f0:71:ff:32:1d:77:69:41:cd:ed:10:12:ef:35:
         0f:c9:6f:98:62:60:ac:06:bf:9f:e6:c4:7f:b3:9f:f9:21:b8:
         1e:3f:34:9c:24:5f:cd:46:d1:15:ea:a3:09:5a:69:b1:2d:65:
         73:17:48:ec:5c:ec:ff:e8:69:37:0c:69:39:b7:b6:1d:14:69:
         63:50:f3:b8:ba:b0:db:f5:17:8c:ef:43:ee:76:75:d4:fb:55:
         25:73:95:d8:dc:2c:2b:6a:27:f3:31:c5:e4:b5:b2:79:34:c7:
         a7:6f:33:aa:1b:14:56:92:c0:03:a1:69:e3:bb:56:73:c8:20:
         5f:a7:6e:14:52:bb:60:9e:b5:dc:90:b7:b1:25:dd:29:b3:53:
         f6:68:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:37:54 2025 by rpki-client