Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/d1d4fa3a-994b-3a7d-9d98-90eeac9a9044.roa
File:                     d1d4fa3a-994b-3a7d-9d98-90eeac9a9044.roa (raw, json)
Hash identifier:          5NapSHACKgUCqiESu5pA15Oqz3MStInqFPXT8r2o+2w=
Subject key identifier:   C6:A8:BE:E5:8A:28:81:0E:88:A8:BC:8D:2D:56:23:4C:47:19:F0:2E
Certificate issuer:       /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial:       010D0C9F4328584A963691E99C1994476A6ADC80
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/d1d4fa3a-994b-3a7d-9d98-90eeac9a9044.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     216123
IP address blocks:        2602:faad:a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:91:e9:9c:19:94:47:6a:6a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=9cb960e2-14b8-4389-9db8-7a2ec01672f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:3a:d7:d3:fc:9e:99:d9:9d:a9:72:f7:06:
                    da:63:df:9d:e8:62:6e:15:25:6e:0b:49:f4:2a:6b:
                    9b:f6:00:2c:e2:04:3d:84:a7:5a:7f:92:f0:84:d9:
                    19:d3:f8:c6:44:23:df:96:37:e2:c9:58:2d:6d:81:
                    27:eb:a3:b6:79:fa:34:0d:8f:f0:18:b0:67:ae:75:
                    9b:0e:fe:fc:ca:36:c4:a6:b4:8f:e7:bb:5e:7c:9f:
                    35:94:91:ea:18:26:51:af:0c:a4:be:ba:6c:b5:b3:
                    81:05:0d:72:31:7c:a4:21:88:a7:48:c0:88:6a:40:
                    72:d5:14:8b:e6:e1:96:65:f0:92:7d:78:21:f4:f4:
                    fa:42:d4:dd:f2:7a:4b:ef:3e:3b:78:a7:41:6d:fd:
                    35:00:30:28:73:d4:84:c9:a5:4b:bc:94:fa:43:68:
                    33:1e:1d:c6:02:2d:43:47:db:b0:1c:c6:cd:ec:6c:
                    43:64:96:64:67:75:ee:d3:60:39:e1:69:ae:54:2a:
                    bc:9a:86:27:ec:eb:a4:fa:ae:fc:33:24:42:de:e5:
                    54:77:a8:e3:17:2f:58:60:50:98:46:44:7f:08:9e:
                    89:a6:0b:c9:81:ed:a4:f6:a3:37:c8:ed:7f:84:b4:
                    44:03:eb:ec:74:23:1b:f9:56:76:31:8c:4a:f6:86:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:BE:E5:8A:28:81:0E:88:A8:BC:8D:2D:56:23:4C:47:19:F0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/d1d4fa3a-994b-3a7d-9d98-90eeac9a9044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl

            X509v3 Authority Key Identifier:
                keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faad:a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:71:65:12:63:e2:d5:10:4a:1d:e8:56:72:e0:b6:4b:12:
         fb:9b:ce:f3:fd:6c:cf:7d:ed:d7:90:83:80:52:05:95:bf:96:
         f1:48:85:fe:f2:f4:7e:a9:28:16:78:9a:af:37:b4:c2:81:71:
         7b:4e:69:71:9d:9e:74:f6:9f:99:f6:29:e7:3f:d9:f2:8e:42:
         11:ab:f6:b6:f7:43:b3:5e:bf:9d:44:6c:e1:16:0c:90:11:cb:
         70:82:d8:4b:c0:cd:2c:46:af:87:d7:05:e1:ad:47:01:14:c1:
         50:a5:ef:48:83:a4:33:11:6b:9d:75:d0:11:a0:36:fb:5e:f3:
         c3:a7:49:7f:a5:23:24:71:bc:49:24:eb:96:dd:34:28:04:8a:
         b8:a1:dd:36:e5:bb:f2:34:8b:9f:c0:c3:79:c2:90:a7:26:ad:
         26:54:8d:d4:b9:9d:6a:02:90:08:30:a9:4c:28:80:4b:17:96:
         ee:65:e7:08:5b:fe:9a:e2:48:60:4d:30:20:2e:41:37:e3:48:
         ec:93:e1:5f:6e:40:14:d0:83:8d:e7:30:1e:7b:c9:3d:0e:57:
         1e:74:73:8d:9f:a1:79:97:86:80:4c:46:ef:12:8a:3f:bd:46:
         2d:e2:fe:57:e9:f2:c7:af:78:5a:d5:e1:b9:23:4f:f4:b4:38:
         40:3b:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:21:47 2025 by rpki-client