Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
File:                     ac71e1cd-bff9-3892-84b0-759735bd38ae.roa (raw, json)
Hash identifier:          3+e71rLOjQhjPWVZ3bFyApva5EIK//MRkxpNzTg9T4Y=
Subject key identifier:   C9:E3:93:16:F2:59:A4:F9:A7:6B:6C:4E:48:7D:C5:3C:EC:9C:E2:EA
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584B13D6BA3AB1EEA84A4DB69310
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     63008
IP address blocks:        2602:f9a9:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ba:3a:b1:ee:a8:4a:4d:b6:93:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=778bae66-aa33-49b1-aa3e-d855c5ae8132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:e8:50:37:6c:cf:16:52:e6:73:9d:72:bb:
                    fe:ef:30:80:47:5b:41:40:db:a6:6e:c7:72:f4:40:
                    99:bc:86:e0:c3:bb:09:90:12:87:47:4e:42:45:ee:
                    c2:95:c9:72:b0:46:39:6d:ef:a9:b2:cb:5e:dd:96:
                    a3:80:23:46:c8:a2:ff:63:3f:6f:0e:77:36:17:c5:
                    c5:8a:c9:71:90:36:b4:76:bb:03:51:6f:c9:85:51:
                    39:9c:80:7c:b7:ef:03:d2:09:2c:34:0a:60:90:92:
                    0d:80:fd:74:21:5f:16:cf:8a:fb:87:3b:5f:53:8c:
                    84:04:74:c1:11:52:d4:21:fc:94:c3:ae:16:3c:9c:
                    3b:b3:02:36:01:62:be:58:3a:12:d4:97:00:5f:5e:
                    49:6b:81:9f:c6:74:d3:08:70:29:94:13:16:f2:63:
                    57:2e:59:b5:bd:90:11:eb:37:1d:4a:7e:df:1e:f1:
                    16:12:87:ed:43:30:9e:fd:33:53:36:72:ed:ba:16:
                    18:cb:b2:f8:bf:9f:09:91:bd:0f:17:01:fb:65:9d:
                    fb:26:48:d2:0d:04:87:ca:95:73:8f:76:79:a2:5d:
                    c6:29:f9:90:31:37:47:aa:97:5c:44:ba:76:12:60:
                    48:db:24:16:fb:08:b4:71:da:04:55:27:42:4e:12:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E3:93:16:F2:59:A4:F9:A7:6B:6C:4E:48:7D:C5:3C:EC:9C:E2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:ef:ff:00:b8:df:3a:58:02:f8:d3:11:c1:21:05:79:74:
         2f:de:47:96:6b:df:98:83:77:c8:d2:99:56:ce:71:ca:4b:b1:
         ca:e5:ef:bf:0c:56:e5:6f:28:1a:ee:8a:8f:c8:16:bf:98:e3:
         42:c8:db:d0:5f:ee:3d:94:df:56:4d:5b:b0:ed:c9:3f:95:de:
         b9:ee:ff:56:02:67:ab:20:0c:bd:23:3f:af:7a:bf:26:83:21:
         77:d9:9a:3f:93:09:e8:09:f9:c7:13:41:a9:b5:6d:10:40:10:
         77:f1:b7:38:6d:71:1e:f3:04:18:1e:90:bc:c8:99:bb:90:37:
         e3:ea:5c:77:45:4e:0e:bf:0b:4a:a5:97:e1:41:14:5f:0c:f0:
         35:56:c6:ba:82:98:7e:12:83:a2:65:fc:c7:1c:e3:5b:95:38:
         d4:32:bc:f5:66:08:ce:58:4b:0d:88:2d:cb:dc:10:a4:ce:83:
         bd:64:c3:e7:29:18:e7:7c:19:e3:9e:be:f4:30:1f:4c:6d:a1:
         0f:ed:0a:be:10:46:f1:0c:21:63:36:e0:4d:e1:09:6d:1b:26:
         1d:cb:cc:eb:b7:4e:50:bc:5b:fc:d8:26:c9:ca:83:b6:c7:63:
         68:bb:5c:e4:55:30:f7:e2:4d:6b:f4:37:ff:51:54:3e:c0:f7:
         5a:ea:a8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:00:17 2025 by rpki-client