Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
File:                     2a220a55-1cb7-31df-a588-4923f4577b36.roa (raw, json)
Hash identifier:          OcR2WNrVfqSldcacis3Lc7Z/aBMc/Aj4bfNZ/XA5+rc=
Subject key identifier:   BA:64:46:A2:C3:4A:0B:FE:68:48:86:88:A4:85:E2:66:D7:07:9E:65
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584B477C66AC1695D3B02A62D5B4
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     31786
IP address blocks:        2602:fb54:146::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:66:ac:16:95:d3:b0:2a:62:d5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=2cc0e352-cbea-4ae9-bcbc-242258d68935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:be:3a:cf:d8:ef:70:70:ed:c8:e9:d0:18:
                    90:5e:6f:14:11:f3:17:9b:90:00:1f:a6:5d:c5:6a:
                    bb:d8:76:1a:58:a4:48:d0:dc:96:c4:88:63:7c:c1:
                    e4:63:a4:d0:a8:ef:f7:64:be:a4:f6:05:86:23:84:
                    70:42:be:04:c1:48:56:f2:c7:df:ee:fd:ca:7a:9d:
                    0e:69:de:c6:e4:6c:b2:3e:d8:e4:f6:a2:95:7b:4d:
                    73:e7:57:ff:22:20:dc:2d:50:22:a0:bf:17:a1:6c:
                    99:e2:f0:45:d8:67:ab:54:c7:a5:36:18:02:ae:63:
                    f8:01:48:ee:f7:64:8c:1d:4f:f1:3f:f9:85:a3:a3:
                    2a:58:e2:ba:c6:cb:24:94:28:19:90:67:2e:b4:f4:
                    26:ef:bf:f9:67:8d:6a:cf:8f:83:d4:d5:96:ad:6f:
                    02:49:a4:90:c3:27:6a:e8:59:92:73:a4:f0:b9:88:
                    c2:d1:ba:ee:f5:fa:be:77:5d:0c:5e:03:dd:d2:7b:
                    b7:db:86:f1:cd:4e:29:28:4f:7a:8e:ef:8e:5d:a8:
                    00:c7:31:1b:38:61:78:d5:fb:f6:f1:c2:60:4e:e7:
                    e1:8c:49:60:6c:1b:5e:d2:2c:ae:b7:bb:49:72:fb:
                    0f:00:1e:79:ce:14:c2:66:72:2c:cb:2e:64:f4:c9:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:64:46:A2:C3:4A:0B:FE:68:48:86:88:A4:85:E2:66:D7:07:9E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/2a220a55-1cb7-31df-a588-4923f4577b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:9c:97:22:15:3a:54:c5:a2:c4:60:8e:82:af:8e:c7:b6:5b:
         b3:c1:a7:fc:17:c9:61:19:27:10:54:6b:e4:5b:f5:c1:06:54:
         95:89:9f:56:3a:32:1e:8d:3e:71:b3:f5:b5:0d:0c:db:c2:bc:
         2d:35:6c:ed:7c:42:8e:bf:11:98:27:3d:e2:20:c6:0b:a5:c2:
         2a:4c:72:82:be:fd:ed:4b:1e:92:dd:70:14:58:16:73:05:48:
         66:09:89:d5:42:45:e9:fd:a0:95:9b:8e:a1:c7:66:77:cc:c9:
         63:6d:c9:e4:9e:2b:64:10:31:ea:f5:0d:eb:b4:e3:d8:7d:9b:
         ff:04:a1:f8:9a:39:1a:ee:66:80:bf:04:fd:b5:75:f4:32:57:
         ee:fd:a8:60:30:a8:79:7a:06:cf:31:04:cb:1a:47:fe:70:37:
         e3:fc:85:86:ef:e8:21:3f:b7:9c:2e:a4:9c:06:ba:fd:00:e6:
         de:4f:59:86:df:8d:1c:88:01:1b:7a:35:bc:15:ab:1e:70:93:
         65:62:84:44:24:95:43:ee:f8:7c:0d:22:9b:d4:d1:95:13:79:
         18:53:09:b1:0a:ab:29:14:54:b9:43:a4:ec:27:fb:45:9b:23:
         4f:51:d4:87:75:55:66:eb:ad:41:3f:5a:8c:2c:18:75:f9:57:
         e6:72:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:08:18 2025 by rpki-client