Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/9c5d2472-54f0-3663-ad7b-30825d377ece.roa
File:                     9c5d2472-54f0-3663-ad7b-30825d377ece.roa (raw, json)
Hash identifier:          +vwJ+Pc9dJv/WrDwg9/SXskwwvlpcRGqhB3PWSVxRyU=
Subject key identifier:   81:FE:E2:BD:C9:25:2A:C2:37:82:77:90:A5:46:A4:0B:A8:13:4A:E9
Certificate issuer:       /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
Certificate serial:       010D0C9F4328584B20673A82DB11BB714647B878
Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/9c5d2472-54f0-3663-ad7b-30825d377ece.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     205909
IP address blocks:        2602:fb87:f40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:3a:82:db:11:bb:71:46:47:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=279ec82b-b4b7-4b43-a1ed-425759e74385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:e4:11:8a:2f:3f:52:22:47:94:5d:08:69:
                    d9:a3:f9:f6:aa:9a:b6:c5:7d:9f:92:cb:e4:0d:00:
                    db:2d:a8:78:ef:85:64:6f:6c:9a:74:83:0f:a2:4e:
                    8c:1c:42:ba:ae:44:38:fc:34:1a:49:65:e0:74:43:
                    ce:69:0c:d6:30:10:2a:17:f1:6d:97:dc:b7:35:d7:
                    a0:ef:30:ce:ea:45:e9:2e:c5:7c:91:31:34:08:ec:
                    69:e6:27:48:b3:3b:3f:6f:ff:51:15:90:f9:c0:7d:
                    2d:d6:ea:6a:40:95:91:2a:28:ce:dd:0b:a4:09:ba:
                    ee:e1:83:3b:ab:f5:6e:91:e0:c7:13:a8:3b:23:f4:
                    47:01:d1:2c:15:0b:33:6a:0a:29:b7:8b:af:2c:f9:
                    4e:c1:63:27:b5:82:08:a2:3a:b2:48:d8:52:96:d0:
                    39:ff:04:eb:c6:b5:e1:a5:87:15:64:0a:57:96:24:
                    2d:c5:9e:55:23:5f:2a:63:3a:7e:34:0a:5e:ee:8a:
                    c6:f3:88:c9:a5:a7:09:4a:00:ce:0b:7a:a4:d6:7c:
                    f1:2e:18:5e:b3:cf:74:ab:04:6e:db:08:d0:3a:8a:
                    9a:b9:55:c9:45:5e:9b:45:9d:56:87:c5:d3:8a:08:
                    09:e7:cd:4e:7b:68:ff:d2:da:b5:b4:04:46:f4:4c:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FE:E2:BD:C9:25:2A:C2:37:82:77:90:A5:46:A4:0B:A8:13:4A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/9c5d2472-54f0-3663-ad7b-30825d377ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl

            X509v3 Authority Key Identifier:
                keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb87:f40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:24:22:de:a6:a8:2a:ac:de:31:5a:55:54:89:d1:8e:63:
         70:02:39:0d:f7:15:ca:ed:cd:52:b7:6a:74:df:c9:c6:af:05:
         61:14:ea:05:74:e3:d3:bd:1c:d7:2e:5a:bc:a8:ff:db:e3:01:
         a1:ac:cc:7a:ec:be:2c:80:ff:b5:ee:63:29:d0:b5:7e:13:c9:
         5d:c5:f9:7d:a3:b9:87:20:39:c5:47:34:25:f2:00:c0:8a:64:
         9c:c2:3a:33:5e:3f:12:fa:90:94:62:71:17:2b:b8:bc:a3:35:
         cf:59:55:d0:a4:d8:a2:53:13:b2:80:2e:ca:ec:2f:d3:08:b1:
         b6:35:40:b0:96:f6:8b:67:a6:2e:f3:5a:33:48:ea:80:1e:b5:
         29:44:20:11:5b:c7:14:54:e7:ef:09:d7:b0:d6:29:5c:dd:b1:
         d1:93:13:af:f6:6b:95:16:3e:f7:2b:c3:88:fc:d8:02:e6:e1:
         d2:f1:3e:51:3c:74:c1:76:80:a0:52:01:ca:d1:62:bb:ff:1e:
         7b:17:fb:1a:49:b9:e0:42:02:44:b8:c7:50:9a:7b:be:bc:69:
         8a:38:ad:d5:f0:47:6f:50:23:e1:e4:f0:be:92:78:24:b3:c1:
         23:b5:8f:05:2f:95:a6:b3:f0:ac:ee:18:2e:5c:11:66:cf:4b:
         e1:20:c9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 07:24:18 2025 by rpki-client