Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa
File:                     7cfb82e4-1707-303a-b880-616f3a50ce84.roa (raw, json)
Hash identifier:          bONt+TvGm7UJ0v/ZnqExhGqxdVK0FNVYGcxDbgmc5Oo=
Subject key identifier:   9F:14:94:F3:02:2C:A5:6B:4A:8C:74:7D:87:36:C7:06:79:AD:79:27
Certificate issuer:       /CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e
Certificate serial:       010D0C9F4328584AE4611FBDDD85043C4BA2A680
Authority key identifier: 29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     401351
IP address blocks:        2602:f7f7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:1f:bd:dd:85:04:3c:4b:a2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=4ac2c2da-c0c8-499c-969d-8f717baa2062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:0b:93:ea:ef:6b:14:2b:1b:5d:fe:ca:00:
                    25:18:7d:27:21:65:e3:6c:ea:cb:cd:0e:ed:4b:6c:
                    32:49:4b:8a:51:fa:54:cd:8d:d7:c9:db:60:29:8f:
                    3a:9b:0b:2f:74:c3:62:b1:69:4c:67:35:68:f5:f2:
                    5a:ce:ab:da:d6:2d:1a:bc:69:04:a9:1f:e5:25:25:
                    3b:f1:72:b9:bf:4f:92:9d:a6:4d:53:8d:e7:76:7a:
                    35:c3:65:97:69:31:09:e9:f9:b9:48:41:74:37:d3:
                    fa:4f:f9:bd:22:ec:69:d0:f3:c7:78:01:a5:77:91:
                    52:e5:e5:56:2f:31:d5:90:23:e3:ff:2b:7c:39:44:
                    b9:36:a0:9d:4d:b7:d3:18:e4:76:cb:36:69:0b:96:
                    97:8b:38:7c:10:81:e7:c5:78:41:9d:68:2e:b9:39:
                    cf:fb:26:cf:fb:f9:80:f5:b3:78:85:62:b1:2f:e0:
                    06:c6:f4:3a:a3:da:c3:19:0f:a0:16:21:74:7e:e5:
                    d0:17:77:07:a3:de:3a:6b:7b:85:f2:28:d2:d2:36:
                    04:50:e1:e9:8b:93:b2:96:42:cd:f4:42:76:47:84:
                    8a:43:ca:90:df:f7:ba:9c:c0:b9:74:48:ab:58:3d:
                    c5:14:e7:4f:d9:18:84:d5:47:2d:6f:47:31:86:25:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:94:F3:02:2C:A5:6B:4A:8C:74:7D:87:36:C7:06:79:AD:79:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/7cfb82e4-1707-303a-b880-616f3a50ce84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl

            X509v3 Authority Key Identifier:
                keyid:29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:57:48:f8:0e:8b:1a:f4:99:df:6d:8f:36:a0:25:60:41:
         b6:eb:7f:7c:45:65:b8:88:98:cd:b4:bf:ad:14:9f:9d:5d:6b:
         ac:eb:33:ec:a5:01:0c:7d:df:67:c9:ea:65:35:f6:01:5b:08:
         e3:89:a2:fc:17:c5:88:43:72:c0:c3:69:04:3b:d2:0c:f8:38:
         eb:ad:64:7a:2e:15:3f:21:83:a1:9a:e1:81:e5:64:a3:5f:df:
         de:5e:86:c8:e8:a5:8e:f8:ba:3a:c1:b1:1f:36:30:9d:8d:12:
         d6:62:38:33:57:90:6c:90:42:6c:a9:7c:63:d6:2d:23:59:bf:
         4a:15:c7:db:ef:8a:60:d4:e3:ca:d0:04:ff:5d:2d:fe:53:2e:
         48:cb:de:0e:c6:e8:34:5c:20:bd:91:e6:87:61:37:1f:db:fa:
         96:b2:82:03:9a:26:cd:05:1f:17:90:bd:1f:d0:69:7a:77:5b:
         62:9f:4b:83:1c:25:91:c9:fb:d4:4a:c2:1f:f2:44:4b:47:b1:
         3f:5a:f7:7b:72:f3:9a:4f:9a:3f:06:37:84:bb:46:4e:ec:b3:
         40:35:43:52:17:9a:0a:f7:e8:a0:b2:af:48:0b:16:cd:6f:85:
         ed:a7:3a:dd:21:7f:9f:8e:10:3f:5d:c7:55:82:17:67:fd:c8:
         63:d7:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:01:31 2025 by rpki-client