Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2a827712-ec76-3b53-b397-dd0018116253.roa
File:                     2a827712-ec76-3b53-b397-dd0018116253.roa (raw, json)
Hash identifier:          116HVBHaWeun4vh2RtwzO/RJDwJQ9vNHiYu2VTzhymA=
Subject key identifier:   3D:0C:E2:C8:CC:A8:74:18:57:13:23:79:57:6D:53:A6:EE:D2:83:50
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B92DD910E3A8F2A03801BA400
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2a827712-ec76-3b53-b397-dd0018116253.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     38047
IP address blocks:        2602:f83b:ca::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:91:0e:3a:8f:2a:03:80:1b:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=c7ae5d8d-dff1-40f3-ab1d-af6ff3065e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:7a:16:19:f3:1d:00:c1:2b:ae:fd:e5:e2:
                    b6:93:b5:a8:b3:d3:77:a6:46:0f:37:ac:0a:45:65:
                    96:ad:53:db:d0:36:5e:eb:d5:ee:7f:e6:dd:a1:42:
                    8a:3d:6d:ac:af:f4:e2:3e:70:9d:b8:85:65:39:be:
                    a7:dd:54:64:89:61:a0:53:1f:fd:ec:39:87:2c:d5:
                    d0:05:ff:9e:f0:f3:f4:b6:88:a8:e7:df:ce:32:d8:
                    27:6a:24:05:2f:82:85:d7:6e:e7:a0:e6:83:f6:7a:
                    28:5b:0a:47:9a:8e:08:6b:53:3f:65:9e:d6:d7:5e:
                    03:e4:f3:ac:4a:6b:5c:cf:41:cd:8c:4c:e2:94:3a:
                    b4:49:71:8b:ca:28:e1:d9:f5:c1:b7:e2:ff:aa:b0:
                    1e:8e:db:c2:de:7c:94:80:2b:4d:2e:b0:13:fa:f5:
                    47:bd:ef:0c:71:81:0b:7c:1c:78:fc:93:8d:b5:fa:
                    31:77:69:79:69:1a:59:7f:33:35:0f:58:42:db:2c:
                    15:bf:55:55:c0:6c:13:e5:96:33:77:7a:52:ce:16:
                    a8:f9:f6:38:3e:5e:82:28:e3:c5:56:6a:93:6e:95:
                    5f:c7:cc:68:0c:ad:0e:29:d1:4a:7e:7e:2d:b4:5c:
                    79:74:7a:9e:02:3a:69:e8:cd:9e:fe:37:25:9b:8d:
                    8d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0C:E2:C8:CC:A8:74:18:57:13:23:79:57:6D:53:A6:EE:D2:83:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2a827712-ec76-3b53-b397-dd0018116253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:ca::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:4e:62:d6:84:5b:91:4f:30:3b:33:29:6f:c8:d4:89:75:
         d0:3a:9a:0e:b1:31:b3:31:98:de:4d:8a:26:69:b2:de:5b:93:
         62:e7:cb:ea:fc:e5:fa:41:3e:a9:a2:c7:35:ac:12:10:20:a0:
         d9:4b:22:67:8f:f4:73:90:4d:c2:00:a0:6a:91:a1:87:f2:bb:
         b1:f3:c2:89:98:27:ac:8e:b7:4b:77:3f:f7:7c:d1:c4:05:54:
         56:c7:11:d9:83:bf:b6:b3:77:28:0a:44:ac:41:cc:66:e2:7c:
         c9:69:78:db:bf:05:a9:9d:c2:bf:95:73:b2:d3:0b:fa:fa:5e:
         b7:4a:57:45:ec:e6:81:13:b4:7d:2a:01:ad:e9:61:05:d7:7c:
         93:8e:47:f7:01:ef:39:8b:1f:14:0d:8e:81:66:75:39:ce:19:
         32:17:79:11:8c:7b:30:f8:33:2c:c7:bc:5a:90:03:1b:b4:ed:
         d1:e1:9a:5a:a1:ef:ce:62:a6:4e:f6:34:e0:16:24:4e:42:d7:
         c7:38:05:65:52:54:3a:68:27:11:b0:39:f8:0a:f9:cc:cc:0e:
         c7:b4:fd:31:78:3d:f3:99:88:1f:d4:c8:a0:09:02:57:a6:7a:
         49:d5:48:e1:85:9a:4a:59:56:98:24:ea:ee:21:8e:a8:3b:b5:
         26:e4:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:10:00 2025 by rpki-client