Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
File:                     15971b5a-708e-36a4-9675-d45099021eac.roa (raw, json)
Hash identifier:          5h2JQ3osMDqp08gwB0t19xHntz2QV7dtCIUNRKsdgwI=
Subject key identifier:   6A:41:B0:82:F5:88:69:0C:6C:58:E8:5B:AD:90:B6:1C:FF:BE:5A:4D
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F4328584B13D6BEB65188FEE5A82C90B8
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     13849
IP address blocks:        2602:fbb5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:be:b6:51:88:fe:e5:a8:2c:90:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=f1934646-5c60-4cf5-8584-39299503483a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:2e:bc:66:65:e9:02:15:be:d3:d9:14:c4:
                    62:86:0b:c1:0d:68:7d:8c:1b:11:c5:48:01:bc:f8:
                    d0:63:c2:61:25:3b:42:9b:14:a3:9c:29:08:19:41:
                    7f:c3:c9:b4:9a:ca:e7:f3:81:db:80:c7:f2:f9:39:
                    0d:88:53:cd:5f:8f:b8:25:a7:ba:6a:ef:0b:58:74:
                    61:64:98:c6:2c:b0:5d:fa:95:01:ef:65:68:43:5e:
                    0c:6a:4f:72:c4:b6:b1:bf:b0:54:c0:54:33:14:a5:
                    b0:36:75:e8:cd:ca:e0:7d:2f:ff:62:4f:e6:dd:c5:
                    a0:a8:ca:9e:6e:dc:fe:23:a9:a7:e8:74:f6:bb:1f:
                    80:3a:69:a9:15:7f:82:09:1c:1f:93:21:0c:94:7d:
                    cb:ee:67:7e:6b:e7:1e:f9:67:aa:46:9f:54:d9:c3:
                    80:f0:83:1d:47:18:b1:f5:ec:bb:95:52:bd:49:03:
                    d6:3f:fa:fe:3e:1b:8a:aa:f1:8a:61:92:af:ac:1d:
                    c7:ea:a5:49:f1:9a:ea:68:84:9b:d3:9e:71:0f:1e:
                    10:ad:59:18:57:20:11:58:c3:17:59:cc:4f:5a:4e:
                    a4:a3:e7:e2:58:25:48:37:65:b4:44:78:e1:a9:f4:
                    86:cc:1d:98:b7:19:6e:a8:6f:1b:3c:76:7b:7e:39:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:B0:82:F5:88:69:0C:6C:58:E8:5B:AD:90:B6:1C:FF:BE:5A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/15971b5a-708e-36a4-9675-d45099021eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ec:7f:64:d4:5d:cb:ca:9d:ca:97:3e:2b:d5:d1:7a:88:e5:
         29:04:76:15:86:a5:4b:90:f4:d0:75:92:a2:ce:98:60:e9:46:
         30:54:5f:80:e4:33:57:73:de:bf:0a:e4:24:0a:35:de:89:91:
         aa:48:58:3b:1a:5b:ea:b8:a7:97:c0:cc:e8:62:ee:e7:78:d5:
         c7:94:26:90:d9:59:a1:34:c3:69:a6:02:7e:4b:24:2c:c8:3c:
         3e:7e:d1:b2:60:24:83:0e:be:ea:06:15:b5:19:c3:c4:e8:67:
         ba:0c:9e:d7:f8:09:0f:f4:0a:15:c0:7f:9e:97:91:ac:20:b6:
         28:18:d9:b2:3b:d9:b4:22:40:3c:5e:f0:b5:ae:1e:14:bb:5f:
         a7:16:7a:b2:da:5e:03:2d:14:a1:64:04:17:dc:47:bf:df:bb:
         5a:c3:cf:3b:18:b8:8d:21:9f:d9:c8:b3:14:76:20:38:50:2f:
         28:ca:f2:e1:4f:98:e3:45:82:e7:a7:d6:f4:76:ff:1f:9e:38:
         08:68:d1:30:7f:78:4b:8a:7c:ad:3d:65:3c:07:1a:88:69:9c:
         e3:aa:71:37:89:15:c9:3c:81:6a:5d:dd:bb:4c:50:af:8b:dc:
         d2:54:a0:8d:4d:d0:b6:7e:ff:1b:02:b4:38:cc:0c:06:f4:bd:
         68:9e:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:32:40 2025 by rpki-client