Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa
File:                     bdae32e8-bb00-36e1-b181-88a71d5957d1.roa (raw, json)
Hash identifier:          SD/aGBnH7GTUC6ePwbl+9Y6oNaElfoPsHfTEwGVHSco=
Subject key identifier:   A8:DF:C5:26:05:CA:78:F4:D0:22:C6:51:DB:A8:33:F9:E0:F1:9D:08
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584B0FA6B91ACDA065E08510AE00
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     216440
IP address blocks:        2602:fa4c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b9:1a:cd:a0:65:e0:85:10:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=ae556602-d25a-429c-a93f-362a5fad689d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:04:3b:ca:12:5e:3b:5f:68:fc:c5:b9:23:
                    68:8b:87:85:1b:d4:02:a6:63:08:96:6c:d6:23:6e:
                    d9:bd:f8:13:bd:97:ac:a2:81:c7:63:72:13:0f:67:
                    50:39:65:e8:d8:82:73:b6:eb:74:d7:80:23:f0:09:
                    54:d0:6d:39:e1:a2:f1:60:17:ac:47:b7:38:6b:ba:
                    04:79:99:9d:c2:22:f1:55:e1:5e:e4:de:e7:80:01:
                    23:79:9d:fd:28:df:96:a0:ba:80:7d:b4:bc:98:2d:
                    31:e9:52:ae:d5:e8:70:9d:83:74:a4:a7:79:95:43:
                    cb:6c:ff:c0:c5:d5:30:ba:2f:85:34:c8:31:49:a9:
                    dd:ab:d4:32:a4:06:d8:d2:ec:b2:3c:20:53:09:38:
                    55:dc:cb:5a:cf:4e:33:4a:de:42:99:22:79:ee:a8:
                    60:cf:16:50:86:85:8e:c1:68:7e:57:2b:54:33:e0:
                    ea:3d:99:0a:91:29:20:49:2f:ca:ec:3e:0a:bc:10:
                    c1:04:40:71:72:3d:aa:e7:5e:89:bb:0e:02:9c:55:
                    86:29:6d:95:19:ba:5f:93:02:04:2b:ff:0b:33:40:
                    d9:94:b9:7b:3b:bb:c2:5e:8c:73:de:0f:0a:84:df:
                    6d:82:46:2a:ab:94:08:18:ed:de:3b:a1:e1:22:64:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DF:C5:26:05:CA:78:F4:D0:22:C6:51:DB:A8:33:F9:E0:F1:9D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:db:70:56:12:6c:95:67:8c:34:c7:fe:ee:a6:d2:4f:2d:82:
         08:76:b8:c9:49:81:53:e9:32:e2:55:af:70:2a:15:f6:e6:89:
         85:b4:d6:10:36:e9:34:ec:31:59:94:0c:b0:16:99:ee:5d:94:
         ae:39:e4:6b:48:62:9a:ab:96:5c:cc:c3:ba:5e:7c:63:0c:d8:
         e6:c2:07:7d:15:d1:19:e3:c9:ec:26:89:90:08:bd:5d:ae:26:
         41:5f:7e:0f:3e:32:e3:5f:ae:8b:a2:ef:4b:4b:44:81:14:a0:
         03:76:21:f3:22:03:d4:21:54:6f:a1:8f:8b:ce:a3:6d:14:4f:
         7f:02:cb:b3:12:84:72:3b:ee:a0:93:73:04:b8:d9:72:26:ff:
         19:9c:37:e9:5c:b4:1f:b6:a0:dc:cb:9b:07:1e:a1:b5:7f:4d:
         e8:7f:df:f3:28:cf:9f:02:3b:46:73:0c:a9:1b:ef:e3:eb:f5:
         41:f2:b4:79:94:05:4d:7c:f2:67:10:09:aa:9f:fe:88:98:32:
         16:ae:44:2e:2e:d9:4d:0e:72:fe:3c:19:ca:95:c9:77:f5:56:
         b7:9c:e7:2d:e2:35:91:59:75:1c:7a:17:33:e7:9d:ea:79:49:
         d5:2b:8f:db:06:49:1f:13:4d:3d:8b:a3:e9:89:cf:e0:40:54:
         af:6f:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:59:28 2025 by rpki-client