Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa
File:                     091dfecc-582a-3f4d-b0bb-533bd7df811a.roa (raw, json)
Hash identifier:          7sQqNAPIE3N47ORSlHkOgBCZUcRnojq3z05zf8jL508=
Subject key identifier:   18:BF:F0:D6:78:6E:B3:73:47:1C:30:1B:CF:DF:0D:5A:EF:E8:7B:9A
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584AC5ABB0AC9137C048BCB03500
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        2602:fa81::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:b0:ac:91:37:c0:48:bc:b0:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=7156a4f1-1dfb-4426-b007-5199ed8f8f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:dc:c0:d2:1c:0b:e3:51:83:20:e2:45:2b:
                    f2:b1:32:6f:fe:ec:da:e3:f3:c2:91:71:a5:89:ab:
                    08:74:c0:67:63:96:f8:68:e5:c8:d1:be:fa:63:20:
                    fc:d3:a1:2f:c4:68:3d:f0:31:ea:9c:cf:e1:9e:13:
                    f8:35:aa:47:7e:88:32:3b:e1:7c:4b:32:9d:a4:ea:
                    c2:bd:53:99:41:9d:26:d5:fa:05:e3:b6:72:67:f3:
                    f5:49:09:5f:cd:39:1e:e1:12:a6:02:bd:33:56:34:
                    0d:ac:96:c7:d5:92:b5:99:ec:cc:8c:c5:5f:51:7b:
                    22:af:c7:a5:25:8e:3b:95:23:7d:05:6c:fb:37:2d:
                    ef:32:80:ef:d3:3d:7f:2c:46:33:4c:90:2d:ee:6c:
                    cd:fa:72:67:89:57:f9:c1:ab:4e:c3:61:8e:c4:25:
                    ad:8a:40:1c:1d:b8:03:39:d6:de:bf:1a:c2:ee:95:
                    ee:3a:f3:d9:57:90:bf:29:03:40:cf:9b:22:28:3d:
                    f3:e7:25:9a:82:eb:7f:35:61:03:f1:f9:b5:f5:f7:
                    4d:68:14:8a:9c:16:12:de:a4:ea:73:95:5a:be:cc:
                    81:0b:2e:b2:c4:94:d0:c8:b7:89:48:43:84:6c:c2:
                    ad:1b:c8:32:96:ce:8e:d1:36:ec:10:47:63:51:ae:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:F0:D6:78:6E:B3:73:47:1C:30:1B:CF:DF:0D:5A:EF:E8:7B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa81::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:fb:5e:ce:92:11:14:41:6d:3a:b8:5f:5a:bb:15:b5:24:
         76:e4:75:23:b7:d8:4c:f6:42:57:30:b6:18:79:1d:d1:0f:ed:
         ec:87:c3:10:51:fd:93:1d:34:cc:46:5e:97:82:3d:0b:d1:fb:
         b4:30:80:8c:5d:6f:71:ad:8a:a1:10:99:91:22:f7:60:86:f7:
         c4:cb:ea:dd:82:94:45:71:37:50:1d:5b:27:9c:d2:70:ba:90:
         9b:9f:c8:6a:50:ca:8e:8c:b0:c9:18:b8:d6:4c:01:b0:81:04:
         88:dd:ab:e9:dd:7c:f8:b3:98:83:32:92:3e:b1:42:43:b0:2e:
         32:c5:43:3a:1c:23:64:25:28:cc:6e:e8:0f:28:b0:42:37:f3:
         a3:71:90:28:a4:a1:7b:f0:72:3e:03:e2:09:3f:a2:8d:82:7b:
         f5:94:92:1e:33:19:76:cc:02:8e:80:d3:a5:be:8b:1a:e4:bc:
         43:ed:24:2e:8c:1f:5c:2f:db:e5:81:04:f7:aa:8e:11:a4:1f:
         4c:99:11:92:bb:89:17:0b:c3:75:3d:e7:28:6b:e0:1b:53:be:
         87:8e:0e:1c:d0:9e:ae:04:ce:43:e9:bb:32:11:7b:13:bb:31:
         d5:81:c4:a8:85:44:0a:fe:fb:49:6a:89:46:75:34:99:ee:d1:
         cc:6c:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:05:11 2025 by rpki-client