Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa
File:                     fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa (raw, json)
Hash identifier:          9k+Ycxy7Go7vn7Ir36rnlS6HpfqKKIEJZRLugAyKHi4=
Subject key identifier:   C1:C0:69:AD:B7:EC:DC:C1:40:7E:B1:54:3C:EE:9D:6F:BE:D3:CA:C6
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F4328584AA42B8DA3F6CB2B3A951C20C0
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     23477
IP address blocks:        2602:f899::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8d:a3:f6:cb:2b:3a:95:1c:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=69c12d2d-fdf8-4a25-aa5b-372b2f15f201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:41:13:da:30:ac:56:32:15:f1:8f:ee:9e:
                    72:dd:d7:34:00:61:aa:00:5e:0d:a8:2f:30:e7:b5:
                    87:1b:d9:12:2b:20:23:a4:89:86:65:7d:9f:f2:87:
                    b1:6b:b6:54:2b:a1:51:3a:29:0a:f7:23:41:46:c0:
                    5f:22:e6:44:ed:13:11:f9:68:e8:b7:85:79:e9:90:
                    dc:a2:5e:cb:fd:5d:81:1b:0d:13:93:51:8f:d1:e1:
                    3b:64:6b:e6:17:28:e1:3b:c9:6f:23:45:50:c5:82:
                    76:c7:78:d0:d5:7d:1a:e6:2d:29:bb:e8:65:78:8d:
                    8a:8a:6b:cb:c1:22:4a:a9:ea:b4:60:c6:85:3e:88:
                    6f:a1:74:4b:9d:34:cc:9c:32:be:e0:a5:24:8e:fd:
                    e1:7e:9a:54:f9:c1:cf:22:bc:6c:55:27:91:06:ef:
                    8d:b0:d9:36:76:f0:8a:ec:87:78:bf:a8:61:e5:d7:
                    d3:c0:ce:d1:d8:9c:c2:9a:9f:b3:69:3e:ae:cd:3b:
                    36:e7:d8:c6:d1:d3:67:3c:f0:11:58:a2:85:55:48:
                    0a:ef:20:76:a0:e9:15:18:e6:9c:f5:d9:81:f7:1a:
                    25:78:0e:b0:09:1e:b2:58:a4:da:88:6c:72:bc:eb:
                    92:f3:8e:63:b3:90:63:a6:58:04:ee:f0:76:ef:0a:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:69:AD:B7:EC:DC:C1:40:7E:B1:54:3C:EE:9D:6F:BE:D3:CA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f899::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:32:bc:15:70:04:d1:81:ae:4b:38:1f:33:a1:79:59:ec:4d:
         a6:a1:5f:49:92:06:46:b7:13:8c:ea:c4:b9:5c:4e:7b:6d:50:
         07:a9:49:2e:b4:3b:89:83:97:ed:50:ec:35:0c:a4:6f:02:13:
         3b:8a:01:fc:35:51:68:d4:6d:96:c0:ae:64:01:cf:68:8c:b4:
         51:0a:c4:f5:66:b9:1f:9c:f1:a5:a0:36:dd:bc:6c:6e:a0:dd:
         ce:5e:f9:d0:4d:67:21:5e:2b:5f:23:3b:ae:11:11:52:ae:71:
         85:53:92:19:42:14:a0:db:38:ce:be:f0:d9:33:99:af:bf:74:
         64:81:bc:70:cf:44:fb:33:18:6a:33:6a:f6:2e:60:dd:6e:75:
         48:c3:f6:bb:fe:23:ff:79:4c:11:27:39:3d:84:4c:ab:32:fb:
         15:d0:5f:15:07:46:31:61:c0:7b:e1:94:51:8b:f1:0b:26:55:
         d6:5a:0d:0c:04:7f:33:eb:88:4b:4f:42:32:63:97:f5:38:38:
         82:5a:c7:2e:2e:4a:08:60:6b:03:cd:41:4e:31:bc:c3:59:11:
         70:52:cb:b2:a6:33:ce:f3:55:ab:4e:1e:64:72:75:89:d1:40:
         7c:c4:e7:ef:49:75:e8:5d:fd:23:06:08:21:d1:45:9e:c2:2d:
         31:80:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:31:37 2025 by rpki-client