Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa
File:                     c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa (raw, json)
Hash identifier:          aEunGL/hsRuDSpFRF0PbVhOmK8QL89Ins0F48TYXXr0=
Subject key identifier:   8C:87:12:F6:CD:81:59:BC:33:96:5A:49:82:35:A9:7D:24:50:E7:4D
Certificate issuer:       /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2
Certificate serial:       010D0C9F4328584AF7EBDBBB6C3BAFA6D4C70344
Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     13725
IP address blocks:        2602:f9a5::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:db:bb:6c:3b:af:a6:d4:c7:03:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=9829df5a-9899-4eb7-b7ce-894883bf84d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:db:a8:c5:99:5e:cb:72:91:1a:62:e6:35:
                    59:63:02:3a:0d:8b:13:f5:13:11:e3:fa:6b:a3:f3:
                    9a:dd:22:35:0e:60:d1:0d:63:bf:92:89:b1:fb:5f:
                    77:02:5b:81:b9:d5:98:c3:1a:2b:89:de:83:7e:ab:
                    48:37:45:19:35:3e:af:ca:d6:01:87:11:98:f3:76:
                    c5:d7:18:11:d0:fb:ad:91:71:c6:7e:32:ce:5d:0c:
                    99:bd:40:4a:4f:88:05:5b:94:26:1c:0c:cb:f3:76:
                    e0:00:3b:42:88:e0:4e:51:d6:19:a7:7a:2f:ee:63:
                    75:92:99:62:22:36:2f:23:22:05:bc:60:f1:48:4a:
                    7b:d0:ce:08:16:04:89:4e:a4:96:d2:3f:1b:d7:60:
                    6b:a7:d6:f5:65:7f:10:5b:6b:c8:6c:0f:bf:a9:73:
                    84:b9:1a:7b:b2:09:0c:8e:8b:04:45:ad:65:f2:13:
                    f4:ba:f3:d2:f0:78:70:1f:56:7f:3e:c1:f7:35:6f:
                    b0:e5:c0:91:37:be:eb:c9:f3:61:a9:ba:ae:0a:79:
                    6b:29:aa:fe:fb:1a:62:ec:31:00:8e:69:09:af:44:
                    a1:2e:14:d1:d7:4c:b5:fe:06:5e:3a:8d:25:eb:69:
                    6a:8a:b3:de:55:1a:67:0e:f2:68:59:40:77:0a:87:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:87:12:F6:CD:81:59:BC:33:96:5A:49:82:35:A9:7D:24:50:E7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/c7c7e277-9401-3b75-9002-1a9ce20bc59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl

            X509v3 Authority Key Identifier:
                keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:ee:a1:92:a4:65:db:e2:57:3e:c8:a5:4e:4b:31:8e:de:
         ad:a4:6d:a8:3c:1d:40:19:5c:34:d3:d3:45:4a:a1:4c:4a:a2:
         09:18:fe:63:c6:00:90:32:cf:34:f1:c7:76:b5:ce:a7:39:cb:
         02:c3:50:5e:0c:11:42:d1:24:98:7b:69:c9:b4:6a:a7:e2:57:
         1f:06:c5:67:68:bc:c1:1a:73:c5:85:b9:a4:a8:ff:2e:77:3d:
         3c:18:5a:3d:9b:69:21:38:49:19:f4:31:98:19:62:d8:ae:2d:
         5f:f8:bb:d9:31:7e:0d:72:d3:e9:82:7f:b3:2a:60:c5:a4:e6:
         5f:23:3c:aa:ae:2f:1d:c1:62:68:00:5a:10:45:43:88:ff:3b:
         23:5e:5b:03:be:84:0f:68:93:f2:d2:4a:be:0f:19:40:1c:b9:
         38:9a:bf:d5:c7:90:8c:c4:d6:84:61:c1:85:01:b6:f5:33:41:
         48:1c:e3:3c:d6:5c:36:59:90:2e:18:d8:53:a2:bf:82:0c:d8:
         ff:e3:d6:1f:4c:dc:98:29:1e:4c:f7:a5:68:66:e1:b3:ec:e1:
         41:72:e1:f8:b4:62:02:b6:b0:70:0e:dc:e6:5e:70:d4:fe:14:
         52:83:b2:bb:6a:c4:e2:38:0c:d7:48:75:2d:42:02:4e:01:2a:
         a4:2d:26:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:23:24 2025 by rpki-client