Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa
File:                     6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa (raw, json)
Hash identifier:          xQkTJSqVwm8bWzvN5TAQ+ZG5IFt0yCWcOEGX05gjkVg=
Subject key identifier:   8C:6C:C6:20:11:BA:49:46:6A:FE:3A:CA:35:6A:22:04:87:09:67:E4
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584AEE268701B47741D8C0205B00
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     149506
IP address blocks:        2602:fbda:700::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:87:01:b4:77:41:d8:c0:20:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=3bae0a3c-4c49-4154-a32c-7b0b89bfe7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:a5:63:e7:05:76:77:91:1b:14:17:50:15:
                    78:6e:5d:f8:e0:a5:57:9b:d7:bd:06:26:4d:db:65:
                    f8:e7:8b:a6:21:80:bf:c7:c9:4d:b4:2e:55:57:2c:
                    55:cc:1a:0f:de:9d:90:4e:b2:01:12:26:da:54:8e:
                    c7:72:86:d6:f2:62:23:6c:51:37:cf:dd:26:fa:c6:
                    c0:31:b9:e0:dd:15:ba:be:5a:6c:fd:42:27:e9:b4:
                    65:1d:1f:53:99:fa:7a:44:71:df:48:1c:be:40:74:
                    ba:7d:6f:b2:78:e7:c9:b4:43:2e:71:6f:e5:5a:57:
                    8e:1b:7a:f6:7f:f0:86:c0:0a:ed:26:94:ad:d9:87:
                    d5:10:80:5d:9f:67:83:05:fa:5d:33:f1:08:f5:b0:
                    e4:5e:25:6b:a1:0b:de:77:4a:52:e8:4e:1b:8e:66:
                    e9:ba:47:d2:99:3d:83:f2:e0:97:f0:a7:f3:44:83:
                    de:df:d6:93:5a:81:9e:d2:68:8b:12:d9:55:e2:59:
                    5e:16:f8:40:ff:69:f5:82:b2:7a:b4:56:cf:a1:59:
                    5f:08:b8:fb:a5:6e:1a:22:d2:fd:bf:26:59:5c:0e:
                    39:f2:99:47:12:5e:12:26:20:32:35:7a:7e:f5:a7:
                    f3:d1:18:ef:51:a7:59:e1:67:72:36:3b:c6:16:fc:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:C6:20:11:BA:49:46:6A:FE:3A:CA:35:6A:22:04:87:09:67:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/6228f914-e755-3c9b-ad82-6f43eb5a6ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:b2:af:c7:75:85:37:12:98:32:5a:1d:f5:92:18:4b:9f:
         6b:e9:e5:de:23:35:12:3e:4e:9c:cc:ba:d5:f4:66:44:36:6b:
         2b:7e:35:07:fd:dc:a9:c0:71:c9:a2:ae:9f:7f:3c:ce:a6:3e:
         19:ea:70:ca:29:18:15:df:72:97:44:ee:b3:45:3d:2b:01:85:
         4d:15:4d:5a:49:4f:5a:81:eb:b5:70:68:2b:a7:4c:bd:7c:c4:
         3c:ae:1f:40:83:25:47:bf:b1:8a:17:4d:ee:49:3f:3a:3e:b9:
         4a:4e:b5:35:da:6f:20:70:de:03:c0:02:bf:95:14:6c:f5:d8:
         bb:5e:c7:7f:82:e6:e5:c0:58:35:b7:d1:0c:ac:6c:8b:23:a0:
         77:1d:32:e7:c3:91:fa:74:c6:95:38:c5:48:bf:62:18:16:35:
         de:e3:6b:38:46:82:d9:92:55:73:1d:0f:08:9e:3b:63:e2:b8:
         07:0b:de:6a:b5:d4:f8:4e:a0:1d:cf:0d:1d:8a:ac:f6:e0:5f:
         32:5c:8e:9f:1d:2f:bb:d7:bb:36:fb:7d:89:e8:c0:51:48:52:
         24:52:fb:02:70:60:ef:cb:7a:d0:8e:b6:bc:cd:96:53:a2:b5:
         8d:98:9d:9c:3b:8b:82:7d:c4:3f:fb:28:e5:c9:e0:a3:cd:44:
         4f:f6:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:37 2025 by rpki-client