Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
File:                     a0f2799f-a502-347f-bf84-3f5a6d253844.roa (raw, json)
Hash identifier:          +vzEmYV/1/TUcyCEl0h69HvnYc0WvWtjeZv+ZNdNLz8=
Subject key identifier:   1E:18:F4:56:3F:4F:7B:94:30:28:E8:D2:77:EA:38:80:BC:97:26:5E
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F4328584AC17B8D27CDD62B88A93B5E00
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
Signing time:             Tue 05 Aug 2025 13:00:41 +0000
ROA not before:           Tue 05 Aug 2025 13:00:41 +0000
ROA not after:            Mon 03 Nov 2025 14:00:41 +0000
asID:                     401395
IP address blocks:        2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:7b:8d:27:cd:d6:2b:88:a9:3b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Aug  5 13:00:41 2025 GMT
            Not After : Nov  3 14:00:41 2025 GMT
        Subject: CN=954838f8-76bb-4d19-a198-0d6976e998e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:a7:12:3e:30:af:0a:c8:5c:4c:36:6b:9f:
                    f3:14:05:bd:e7:9e:14:bd:04:14:d4:d1:3f:01:04:
                    68:18:3d:a2:ec:db:0e:b5:ce:3a:f1:98:c4:97:f5:
                    29:9f:30:a2:1f:34:d8:07:95:5d:a4:69:0d:89:eb:
                    4b:5e:ad:be:3a:39:51:a3:e0:ed:cc:45:9d:58:d7:
                    b3:f6:35:6e:79:a1:ba:85:28:35:75:62:89:e0:65:
                    de:d5:a2:5e:9a:64:59:ee:29:f8:85:0b:8b:9e:ec:
                    76:66:00:7d:ed:54:08:9d:9f:36:17:5f:f7:59:8c:
                    b3:d7:87:d6:45:2a:78:22:44:0a:56:ce:c2:e6:18:
                    c2:f1:17:fc:46:13:53:26:60:e9:3f:11:5a:9f:d2:
                    b8:b0:28:e7:17:1b:4b:52:85:45:dc:23:67:62:82:
                    2a:b0:97:78:12:a9:c4:18:c1:23:16:f2:fb:60:be:
                    52:ac:8e:d3:60:85:15:dd:aa:c9:16:f2:fb:9a:30:
                    4b:d5:13:ca:3b:b1:85:e3:20:20:c3:7c:e9:a4:4f:
                    96:93:56:cf:83:c6:21:fc:51:91:30:0e:5a:41:79:
                    bf:2a:dc:2b:e1:10:e6:c6:75:02:38:24:e5:1a:99:
                    bb:78:cb:0f:b9:7e:2a:0f:17:e3:98:22:d8:d5:8a:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:F4:56:3F:4F:7B:94:30:28:E8:D2:77:EA:38:80:BC:97:26:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:90:71:db:be:de:2d:1b:8e:4b:f7:10:6e:12:c5:96:b0:02:
         9c:64:0e:1d:1d:10:b8:0c:c2:ac:7a:f6:87:3e:8a:e7:3b:2b:
         24:f1:a9:15:51:26:d4:a5:6c:6f:83:8a:fd:08:de:8f:bb:a9:
         37:8a:3b:c0:f7:bb:32:7c:15:df:3f:b4:14:f0:6c:9e:e2:1f:
         15:cc:bb:90:c8:76:3a:27:35:54:3a:82:2a:87:1b:0f:5b:31:
         d1:e6:0d:11:6d:42:c1:1d:58:de:3b:28:45:30:a8:d1:62:e9:
         8c:66:e8:b5:ae:e3:be:0f:3c:12:62:b8:85:a5:bb:8f:f8:0e:
         93:e0:53:36:bb:2c:5b:10:66:db:07:a0:37:26:43:8e:25:cd:
         85:d2:ff:ad:23:a0:49:9d:6d:fb:db:9b:73:a6:92:6f:43:42:
         3a:3a:ef:d4:57:1d:0b:f4:fb:74:b8:bf:f4:20:65:73:a2:fc:
         5c:5e:9a:36:53:ad:51:3f:bf:85:54:9b:4d:2d:d9:ca:47:05:
         5b:42:fa:52:46:35:65:b4:de:b3:6f:82:df:44:b4:10:9f:af:
         fb:68:04:45:21:b6:70:18:ef:14:5e:80:42:54:0d:9e:81:12:
         8c:d2:3c:69:2f:10:29:0d:7b:c7:66:62:16:f5:b5:90:a5:29:
         f9:bf:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:17 2025 by rpki-client