Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
File:                     443655ef-5569-341f-af55-dfa490d592be.roa (raw, json)
Hash identifier:          5nvARMNqb23WWJGqRRg3GPupqAxbx3p5Xq0Gf44ZF60=
Subject key identifier:   70:C2:9E:92:F2:95:95:CB:E5:36:2B:ED:C4:CC:E6:CB:44:08:A0:4E
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F4328584B5571E3038EBF23EB37189880
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        2602:f972:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e3:03:8e:bf:23:eb:37:18:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=65070bdc-a044-4546-a2f6-dd1a62e1fec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:1a:62:d3:2b:5b:12:8d:b6:06:05:db:00:
                    ad:f8:e7:dd:79:bc:a4:4c:45:77:a3:0b:66:f7:e7:
                    90:5c:e4:ce:ea:1a:81:b9:0b:89:d3:da:82:6d:75:
                    fb:9b:3c:de:95:14:b0:e0:d3:b3:cb:6c:53:91:ec:
                    cd:53:31:8a:ac:00:4d:b5:65:1a:6c:51:62:8b:4c:
                    c8:20:56:d5:0a:3c:ac:e9:08:25:e0:b8:0d:12:0c:
                    a4:b2:6c:50:00:9f:60:95:86:8b:53:a5:11:1d:52:
                    db:97:a6:53:51:36:03:1e:1d:20:11:ab:91:6e:d7:
                    78:e0:ac:7d:c7:fe:36:0f:e1:99:4b:01:82:00:ef:
                    1e:df:71:dd:4e:0a:85:cf:91:a1:25:4b:be:df:3c:
                    52:6c:22:6a:bc:a0:04:bb:e7:c3:a0:00:b8:15:60:
                    f9:38:df:d2:d8:24:f1:dc:d6:96:53:3d:7d:d7:9d:
                    eb:49:50:13:d1:f9:13:04:dc:56:fc:00:3d:60:c6:
                    e9:77:5f:89:45:a3:97:42:73:84:d9:35:e4:1e:a2:
                    55:a2:27:dd:42:f1:37:04:7b:9b:50:4f:57:de:3f:
                    65:d2:7a:bc:39:97:37:25:9c:be:5b:f0:87:3a:30:
                    b6:3d:d7:fb:ec:27:55:28:b7:84:1d:41:98:64:53:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C2:9E:92:F2:95:95:CB:E5:36:2B:ED:C4:CC:E6:CB:44:08:A0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/443655ef-5569-341f-af55-dfa490d592be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cf:cf:00:55:eb:44:ba:a2:92:a8:a4:be:ea:3c:9d:73:7d:
         9f:1a:07:c1:56:00:68:b1:73:89:4e:ee:13:56:fa:02:a9:73:
         88:20:46:50:b0:0d:1f:25:74:df:22:01:b2:36:cc:2c:b8:c5:
         36:2b:bf:46:92:52:6e:18:29:c1:98:8b:9f:4b:ac:5a:55:22:
         cb:c9:aa:c6:04:9b:78:14:b6:04:fd:0b:cb:fe:18:11:54:4f:
         05:93:65:63:59:bd:15:31:61:97:41:4e:99:2c:5f:ff:7e:4a:
         2a:09:4a:44:76:1b:61:02:2c:12:dc:b5:4d:84:9e:70:8e:34:
         5b:7e:13:90:2c:4a:21:51:c1:1f:89:cb:a9:e6:b4:da:a8:43:
         e8:e9:32:f9:9d:b3:70:df:a2:d5:14:f2:3d:9c:c2:81:c4:7c:
         d3:e9:2b:90:a6:48:26:51:8f:9f:59:ba:52:d1:2f:cd:f5:73:
         ef:2e:f9:ec:be:ef:b6:59:4f:2b:0b:7c:00:59:e1:69:43:45:
         46:73:4b:ba:b9:27:eb:76:ef:74:80:7e:dc:81:09:c5:bf:46:
         af:c4:f2:47:8a:48:e9:4b:5d:a8:86:c1:26:f3:93:93:ff:39:
         1b:a7:8b:ec:47:bc:3d:f1:00:77:c3:f4:be:4d:54:4e:12:83:
         a3:bf:b6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:59 2025 by rpki-client