Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
File:                     924bc74d-b046-30c2-b4cc-123603abad90.roa (raw, json)
Hash identifier:          jchJ2fFNxAw8TuLdvBvfnlwH71IPNrObcLHBKtHFuXk=
Subject key identifier:   71:E0:7D:EE:5A:1B:52:F9:03:7A:9C:0F:DA:36:7B:EA:B3:0A:E7:B0
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F4328584AE0311729379FE0D3E508C380
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2602:f98b:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:17:29:37:9f:e0:d3:e5:08:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=c25f619c-c2e2-4f09-b0c2-220e09f205ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:fa:32:fb:5c:69:13:b8:dd:df:70:3a:4b:
                    85:58:ec:ad:d9:cc:47:72:0b:ae:ba:54:e9:82:9b:
                    b0:08:bd:14:42:2e:19:39:b5:04:06:74:50:01:9e:
                    57:15:85:bc:ee:10:a3:aa:8e:b8:0b:5c:8f:9b:d0:
                    1d:8c:a2:24:eb:b8:0b:3c:6e:b5:aa:e7:3f:e3:16:
                    8f:d9:a3:28:cd:72:2f:bd:75:ab:2f:68:a5:fe:c6:
                    cd:0d:40:7c:9f:72:a9:f4:c6:92:ae:2b:d3:94:89:
                    29:ab:22:8d:2a:00:aa:ca:95:a3:19:85:22:01:e2:
                    09:f7:17:a1:cf:ce:41:1d:d3:da:db:a9:7f:ce:d7:
                    bb:8a:45:f3:c0:91:c7:1e:60:a1:4c:b7:6a:06:d6:
                    29:7d:47:d2:91:46:66:cd:9e:d4:8d:e5:11:22:0b:
                    4b:c1:b0:1c:47:5f:62:a7:3b:83:2f:a7:f7:0b:eb:
                    3d:59:14:87:66:82:23:e9:ff:b6:68:66:05:55:72:
                    48:7c:bf:34:04:7e:65:90:13:49:c8:3e:1b:ac:5f:
                    23:74:93:a3:1d:d7:53:17:cc:2b:3a:9e:50:c6:11:
                    5e:d9:51:53:37:b4:47:ea:c7:d1:bf:65:23:ff:50:
                    78:5d:21:e4:da:67:10:14:60:fc:39:02:5d:83:3d:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:7D:EE:5A:1B:52:F9:03:7A:9C:0F:DA:36:7B:EA:B3:0A:E7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:d5:4e:8a:be:49:23:12:7b:d4:1d:66:b7:99:b3:f1:a9:
         a6:af:96:a0:2b:20:73:91:c0:d6:5a:75:5a:ea:9f:ad:c7:91:
         72:00:fc:5d:1f:fc:a1:61:7c:28:c8:95:15:af:6b:6f:8c:34:
         9f:a0:51:9c:f6:15:70:3f:81:88:4a:5f:98:a4:5c:64:59:fb:
         28:20:9c:30:34:37:4a:f8:2a:68:7a:50:da:95:63:16:fc:ce:
         15:50:4a:7d:a3:d5:8c:1d:b8:c1:1a:33:b5:9c:cc:98:16:0a:
         24:62:1a:a8:82:2e:1d:03:3d:ea:5c:c9:d7:d1:dd:98:aa:91:
         01:bf:d2:62:81:67:96:1b:e6:0e:e6:4e:14:b5:51:58:68:7c:
         b9:74:08:5b:5b:ca:3b:1c:e0:4d:3d:68:a4:24:38:0b:77:45:
         78:3f:3a:2a:17:4b:0f:33:55:e2:f3:62:70:bf:bc:7e:9a:4a:
         62:a0:11:90:0f:62:7d:9e:26:44:68:4a:23:fb:68:9e:c3:00:
         f3:37:6e:a4:40:e1:10:87:54:93:f8:f5:ed:86:db:84:e7:90:
         e4:4e:56:0c:f2:45:a3:a3:e3:ab:03:b9:87:a4:bb:32:9c:6c:
         67:b3:5b:bd:3f:ce:8c:a3:38:69:dc:d6:51:74:bb:4e:ae:2c:
         03:1c:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:48:36 2025 by rpki-client