Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/94f902c5-1b7d-340f-8680-a268901dd48e.roa
File:                     94f902c5-1b7d-340f-8680-a268901dd48e.roa (raw, json)
Hash identifier:          jAgqIBYHd+342JiouDwywOtqyd3EWGb66NeBk2lwRWU=
Subject key identifier:   F6:89:07:BD:1D:31:6F:8A:2A:51:30:AF:D0:8A:62:E0:E6:54:49:FD
Certificate issuer:       /CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4
Certificate serial:       010D0C9F4328584AC5E5858E6CC64103166ACB00
Authority key identifier: 29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/94f902c5-1b7d-340f-8680-a268901dd48e.roa
Signing time:             Thu 07 Aug 2025 02:57:28 +0000
ROA not before:           Thu 07 Aug 2025 02:57:28 +0000
ROA not after:            Wed 05 Nov 2025 03:57:28 +0000
asID:                     401771
IP address blocks:        2602:fbe7:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:e5:85:8e:6c:c6:41:03:16:6a:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4
        Validity
            Not Before: Aug  7 02:57:28 2025 GMT
            Not After : Nov  5 03:57:28 2025 GMT
        Subject: CN=d687c3cd-af5e-48cb-9628-0e6881e9b460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:cd:87:7f:c5:a4:a8:38:9d:1d:cd:fb:0c:
                    7f:40:08:7b:b4:82:c6:59:09:20:29:8c:87:70:65:
                    cf:a7:7f:9d:0a:05:d1:89:41:24:83:29:0a:e9:b7:
                    12:71:9e:36:5d:88:95:74:25:ab:0f:e0:69:e2:dc:
                    e4:36:eb:c0:83:cd:b3:0f:19:f3:40:63:38:5a:aa:
                    3d:10:fb:2e:04:c1:67:9a:c9:ac:42:33:6c:95:27:
                    59:eb:65:d6:ed:d2:72:2d:af:a3:aa:4b:c6:ad:df:
                    b2:11:c3:8d:f8:75:72:51:b9:6e:85:aa:6e:97:c7:
                    e3:8a:af:bb:20:1f:1c:3c:c0:2d:23:92:5f:9a:fe:
                    b0:4b:46:c4:33:9b:86:3a:f5:d2:98:da:58:d7:d7:
                    ef:c5:b8:ff:11:5c:37:52:89:36:16:04:66:fb:f0:
                    64:b1:ea:d3:57:e5:ad:4f:d8:83:fd:ee:b5:31:bc:
                    0f:63:e3:b1:62:4d:d4:bc:a9:0a:9e:86:6f:70:96:
                    d7:83:cd:4d:a2:e5:62:14:ce:30:aa:76:93:0a:84:
                    60:58:f9:8b:f4:1a:6a:8a:08:8a:33:78:96:79:43:
                    22:b3:a9:6c:65:b6:ea:66:1f:ce:7b:92:6d:57:0f:
                    5a:10:bf:63:5d:3a:3c:de:2f:01:7f:9c:9e:69:0c:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:07:BD:1D:31:6F:8A:2A:51:30:AF:D0:8A:62:E0:E6:54:49:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/94f902c5-1b7d-340f-8680-a268901dd48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe7:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:34:68:27:6f:73:08:01:1c:9d:4e:71:d9:08:10:1d:c4:
         76:27:e4:ea:8c:54:4e:c8:ce:38:56:b5:07:46:2a:c2:80:4f:
         f1:ef:ad:9c:17:72:0e:a8:f4:99:b8:65:a2:74:3f:2b:f2:90:
         4d:d8:bb:5c:85:8f:a7:db:6f:42:8a:be:92:f5:23:49:62:ee:
         b9:a3:8e:c4:ba:80:97:63:5f:2f:ba:4a:0a:8c:0e:45:5f:b3:
         66:85:86:af:ce:ce:08:a3:51:81:ef:8e:6c:f9:7e:f2:71:0b:
         c6:f5:32:11:80:a8:ad:d7:e6:6e:3b:2f:85:24:0d:28:92:a4:
         d2:a5:ff:c2:c1:96:ad:b0:17:77:aa:a7:5b:5b:68:58:21:ce:
         09:bb:2d:a0:b7:f7:da:9f:ac:38:36:39:5e:a5:b4:56:67:45:
         65:fd:0b:7c:7c:8c:dc:86:f8:e1:9e:f7:0a:aa:ec:9c:35:b3:
         d5:60:a5:4b:34:b9:44:79:16:66:c9:70:b3:37:27:61:89:c0:
         65:45:d2:a5:6d:20:8b:4c:6d:de:20:d5:e5:13:c6:06:35:58:
         17:16:c7:6c:79:21:0d:97:7b:2b:ea:a8:17:28:b4:b2:12:5f:
         a9:5d:63:8e:f6:71:65:29:c2:9a:98:59:d3:e3:08:e6:b4:c9:
         c0:c1:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:44:21 2025 by rpki-client