Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5371538-b212-3908-b99f-99e5998c6a21.roa
File:                     d5371538-b212-3908-b99f-99e5998c6a21.roa (raw, json)
Hash identifier:          JwaTPpEGZo45f+cOLnZvyB0UMAaSrhzDQ0FvA/weLcg=
Subject key identifier:   40:42:3B:1C:B5:90:E9:61:59:18:6F:4A:1E:4B:A9:C7:AC:99:61:6B
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF521513D3A7BB99D20583300
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5371538-b212-3908-b99f-99e5998c6a21.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2044::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:51:3d:3a:7b:b9:9d:20:58:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=0948e9af-1ae9-4896-b2a4-0f1f77e09cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:f2:0a:54:7e:74:4e:44:37:cf:1a:75:c0:
                    0d:15:4b:5e:e5:ca:dc:3b:be:5c:0b:4a:df:63:71:
                    ed:59:24:7c:4b:39:a6:44:c3:bd:da:25:0d:0e:62:
                    d3:c9:a7:d0:24:9b:09:44:1e:03:a0:b7:9f:7a:aa:
                    a7:d2:d6:4e:b9:35:cb:6f:30:39:00:2f:b4:9e:a1:
                    5a:e8:be:67:e4:eb:e8:5f:cc:ab:29:d8:c3:6a:84:
                    2e:ef:0b:21:7f:b5:31:d1:a4:64:45:6c:3a:b9:eb:
                    ec:1a:e1:c2:22:2b:68:a2:33:13:64:aa:a2:17:35:
                    95:6f:26:e2:70:70:ff:ae:60:9a:e8:c8:c3:c1:ab:
                    bc:59:e4:86:69:c6:06:fb:a5:60:8c:f9:35:7a:91:
                    a2:4f:c7:e0:62:f6:a2:d6:0d:ce:69:29:17:5b:a0:
                    33:61:5e:cb:0c:ca:27:b7:e6:a2:1c:63:d1:db:17:
                    58:a3:a7:0b:84:e2:11:2c:fc:1d:16:69:4b:f5:04:
                    d5:48:10:53:4e:a5:97:5c:30:db:ef:96:ac:0e:a2:
                    65:e2:01:39:91:03:94:ef:ff:5a:77:98:bc:bc:7b:
                    03:03:33:e6:bf:5e:f9:dc:c3:57:e7:21:66:65:64:
                    ae:10:9e:ff:6f:c1:24:50:a5:3a:e1:2f:69:b4:01:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:42:3B:1C:B5:90:E9:61:59:18:6F:4A:1E:4B:A9:C7:AC:99:61:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d5371538-b212-3908-b99f-99e5998c6a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2044::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:88:a2:6f:cb:35:48:10:51:c0:b1:d2:40:93:30:86:48:
         4b:cc:83:fd:2d:9b:0e:b0:ba:60:2d:90:c9:cb:56:2a:af:f0:
         d3:5d:4a:18:37:85:6e:56:5a:21:e3:ca:1a:be:1e:8f:6b:2f:
         3f:8c:16:66:69:6a:e8:2c:8c:91:d9:45:2a:af:96:80:fb:1e:
         5c:bf:83:5a:9e:58:f2:2f:88:c8:93:8f:e6:71:d0:4e:7d:04:
         1c:0f:8c:98:36:fa:5b:5b:25:e0:02:a8:98:76:04:68:26:9c:
         d7:d3:d0:3d:58:a8:7f:2e:fb:6d:f4:ce:c6:80:e8:c3:6a:ce:
         4d:c4:3c:58:d6:4f:31:3c:8e:e6:87:98:3f:b6:20:16:e9:5b:
         b4:9f:76:22:9d:47:ab:56:77:69:a9:24:95:eb:17:a1:28:be:
         85:ba:e6:fd:d2:d0:24:4d:93:98:a6:3e:e7:a1:f0:eb:ce:ee:
         d3:8f:d2:d5:ac:bb:39:dd:8c:8a:43:46:9a:26:2b:d6:d2:5f:
         0c:7d:18:0b:6e:92:65:e4:1b:de:6e:86:a8:57:fa:bd:58:f3:
         a7:cc:80:ab:e8:67:a2:ee:7b:3c:c0:8f:94:a8:d0:bc:4d:c8:
         f7:47:e3:7a:4f:2d:4b:12:ae:b4:16:53:1b:30:96:a8:3d:9b:
         81:34:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:39:30 2025 by rpki-client