Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
File:                     98a144c3-7846-3b48-9f34-e69502d5b5c7.roa (raw, json)
Hash identifier:          iCUn9O9Oas+DnWNAVUl2/5rSuykXZbbgZZzEmhCQ1yc=
Subject key identifier:   EE:FB:A6:C4:03:26:06:A0:4F:4E:88:D1:B9:09:C1:59:20:81:83:84
Certificate issuer:       /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial:       010D0C9F4328584B434C5B82A13FBEB56F6BBE80
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     30330
IP address blocks:        2602:803:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5b:82:a1:3f:be:b5:6f:6b:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=6b1db79f-2792-48a2-96a6-1c4c94a92061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:41:b1:62:4b:6c:22:73:51:54:55:b2:4c:
                    cc:a2:61:98:6a:ba:8e:63:3d:f2:b0:24:d0:18:ba:
                    19:fc:75:ed:65:4a:0f:16:e6:e3:d5:b0:cf:cf:05:
                    33:cd:34:71:34:36:34:a3:8b:f0:88:8b:1d:7b:7a:
                    38:fe:e0:88:e6:43:b8:2b:bd:d5:d4:61:15:40:53:
                    06:7c:ad:af:46:f0:76:d0:a9:69:40:48:86:d0:5e:
                    5f:6b:ac:aa:66:b1:e9:78:79:e0:fc:af:9e:54:d8:
                    f2:ac:b9:cc:1d:3d:5f:f1:29:29:1b:2d:c6:43:4e:
                    b6:b6:6c:35:22:a9:08:4b:a9:8f:fc:fb:41:35:d5:
                    8c:1e:ac:39:5d:8d:c4:a6:7c:05:0d:66:0e:54:fe:
                    c1:b2:b8:c5:b7:44:ce:5f:83:72:86:3a:12:2e:e7:
                    e4:35:40:f7:46:fb:bb:68:4a:ca:d8:26:d8:e4:10:
                    83:16:2a:47:5e:de:07:ff:29:0f:13:5b:fc:a8:de:
                    f6:63:53:c0:83:2f:b7:d5:42:81:91:b1:ec:47:1f:
                    42:1d:2e:da:8c:03:5c:09:ea:96:ed:32:e6:da:cc:
                    4d:0a:3c:47:d9:17:38:b1:b6:5b:30:38:60:c1:07:
                    0f:0b:b8:68:01:6f:bf:86:63:06:ab:33:55:2b:be:
                    06:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:A6:C4:03:26:06:A0:4F:4E:88:D1:B9:09:C1:59:20:81:83:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98a144c3-7846-3b48-9f34-e69502d5b5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl

            X509v3 Authority Key Identifier:
                keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:24:c4:32:7a:78:8c:0e:e6:77:d3:d0:28:97:d0:b1:05:3e:
         3f:52:b1:b1:a4:ac:b1:2c:46:41:28:fa:2d:0c:8b:e5:3a:3b:
         90:ac:31:d9:22:46:ee:d5:0d:ca:4c:ac:5a:67:3e:8a:9a:fa:
         da:e7:01:cd:f2:67:d8:4f:0b:f0:4d:d4:8c:9c:9e:72:5b:2f:
         70:8c:b8:e5:1d:5f:34:e3:a7:ba:1e:01:20:e3:75:12:c2:63:
         50:ad:f5:27:7c:5a:88:e8:28:dd:44:10:5d:4b:cc:95:6c:9e:
         02:ed:fa:a8:3c:a2:71:9d:30:38:c9:51:f4:85:05:f2:f7:a8:
         7d:f0:b7:e7:6a:0f:b1:1a:d8:90:82:ba:4a:f9:fe:fa:0f:d3:
         04:3e:1c:4e:e4:55:8b:6d:64:80:5f:35:ba:68:d7:ca:a8:60:
         ec:07:30:f2:58:61:1b:47:d2:f9:68:69:28:20:43:6a:98:8b:
         6b:76:55:6c:b6:81:98:91:1a:b4:76:65:a4:51:ba:25:40:ae:
         f9:bf:01:91:84:40:6f:a4:7c:55:30:d2:62:6c:6b:0e:f6:10:
         c1:9f:c2:a4:0f:d2:8f:96:34:6f:02:52:94:ed:77:68:48:97:
         d2:0d:50:cb:25:ef:be:4b:af:59:8d:ea:4f:f2:01:24:ec:8e:
         ee:6c:c8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:14:34 2025 by rpki-client