Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa
File:                     0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa (raw, json)
Hash identifier:          AN2Hi5uE9enjSHALK+7NAzSLY4ldzn9WGxdw8agJPbQ=
Subject key identifier:   0B:BB:C9:CC:C4:8F:3E:DD:FC:16:BF:AD:0B:DE:5E:E4:FC:1C:99:E6
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584ACCA65530B910C93984B42900
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     63183
IP address blocks:        2602:f7fc::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:55:30:b9:10:c9:39:84:b4:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=e32f6e9d-045b-4462-ba9c-4aeae4ab20ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:87:4d:67:4f:61:d6:73:c2:9b:fc:06:36:f9:
                    f3:6e:a3:63:70:68:fa:54:3f:c9:a6:dd:83:15:81:
                    ee:75:49:1e:8f:f1:f7:d6:36:92:e5:e8:82:b6:c8:
                    13:bd:89:de:c1:47:12:6c:4b:04:7e:50:61:26:c1:
                    45:1f:1c:29:d4:d1:c8:eb:8f:72:1b:22:7b:4a:7f:
                    40:b7:93:b8:fa:33:39:45:93:39:23:56:df:5e:3c:
                    a4:f3:75:ee:ef:26:5b:00:61:3c:5a:85:08:48:39:
                    8a:37:e9:bf:d2:6a:23:09:a8:75:b1:8f:bc:99:1a:
                    79:33:c1:7b:69:96:43:35:f3:cf:63:1c:b2:f1:75:
                    f6:5d:e3:89:c2:64:42:48:7a:6b:b1:16:f9:d1:54:
                    0a:8e:78:3f:13:d8:7a:d8:c6:ca:67:23:5d:74:28:
                    12:c2:9b:f0:95:08:fe:f2:b0:28:72:cb:cf:e0:78:
                    0c:6b:21:85:db:53:3e:4e:f4:3e:54:81:2d:b8:62:
                    19:17:10:7b:25:e2:1e:bd:66:ad:c6:d8:47:b9:c9:
                    ce:4d:5a:6c:8f:7e:9e:e9:fb:3b:d1:5d:95:68:e3:
                    62:13:6e:b1:13:b5:88:77:bd:e4:31:97:f8:df:bb:
                    d5:2c:21:a4:6c:8e:67:d2:8b:0d:39:45:7c:25:f5:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BB:C9:CC:C4:8F:3E:DD:FC:16:BF:AD:0B:DE:5E:E4:FC:1C:99:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7fc::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:be:bd:5f:8a:bd:1d:97:83:3c:a3:4b:24:ba:a5:cb:e5:97:
         a2:24:8b:63:b7:ae:cc:ac:4c:a7:36:a3:a1:8d:91:45:cd:4b:
         27:3c:78:ba:0d:30:8e:54:bd:3b:af:c6:f3:77:fb:15:cc:f4:
         0e:4c:ed:ba:b0:06:b2:db:9b:75:6f:a3:13:27:b0:c1:d0:b4:
         9b:f1:5f:57:90:f5:f1:de:a0:d3:5d:ed:e5:af:89:9f:c8:bb:
         da:48:d8:be:e0:c2:dc:3d:4d:b1:29:cc:9c:04:c4:ff:30:22:
         9a:db:63:29:36:ba:7e:79:cc:5b:bc:fe:30:e3:2e:c3:a8:24:
         07:3c:d6:60:d6:8a:83:ac:b8:7c:bb:ae:96:97:86:1d:08:3f:
         d4:e8:2b:91:e8:af:78:b8:ce:d5:ee:f0:5a:d9:ff:89:d3:3d:
         f2:d6:8f:84:09:ed:15:7d:f1:39:18:29:bf:de:72:db:3f:82:
         06:b9:88:4f:1d:88:0e:ce:29:3b:96:72:75:d4:65:63:42:e1:
         2b:b4:c8:20:70:31:10:c1:58:1e:cd:0f:92:61:30:63:f7:b0:
         90:52:d2:aa:18:ac:4c:25:45:78:25:44:36:a0:13:d5:03:ae:
         32:56:13:89:bb:cf:7c:b7:23:bc:a4:e1:0b:d4:9c:7a:c1:4d:
         a0:5d:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:54:40 2025 by rpki-client