Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/54a12d1c-a5f0-3d12-9a29-acb8acf11775.roa
File:                     54a12d1c-a5f0-3d12-9a29-acb8acf11775.roa (raw, json)
Hash identifier:          TxrE3udtcu1wJZ0yp53Q25+DGASe5QtGC/iQ+SG7EZ8=
Subject key identifier:   EF:32:F0:4D:B0:36:56:28:19:31:4F:88:5E:B3:F7:25:E9:6E:8D:CF
Certificate issuer:       /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial:       010D0C9F4328584B28C6EE768E9B8FC51CBC5BC0
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/54a12d1c-a5f0-3d12-9a29-acb8acf11775.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     12202
IP address blocks:        2602:fb08::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ee:76:8e:9b:8f:c5:1c:bc:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=61283f97-4767-49da-b3c7-5482f2c117d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:26:d9:9f:37:36:dc:57:3a:7f:d6:af:1f:
                    fc:61:86:66:07:b0:61:e1:60:65:57:4c:68:11:29:
                    f4:21:6a:fa:f0:0b:af:48:5b:75:ee:4f:e5:fe:92:
                    d2:83:e1:c5:a9:05:e5:0e:58:33:e7:91:eb:08:c7:
                    8a:1b:1f:d6:97:82:ad:3d:0c:a3:15:5f:e4:74:28:
                    78:cb:42:3a:b3:6c:94:87:41:39:80:37:3d:08:24:
                    08:1c:41:31:74:3e:62:b6:e3:4e:55:9c:39:90:49:
                    ad:d8:8c:1f:5a:d6:e2:ba:59:a6:76:1b:be:72:78:
                    45:79:22:37:d5:17:99:9b:69:3b:bc:f2:8b:3e:89:
                    2a:fe:45:cc:69:c6:b4:1e:8f:df:c2:08:eb:6f:38:
                    a6:4d:3e:95:cb:b2:cf:24:05:c6:12:04:87:21:d9:
                    74:f5:f5:9e:9b:1e:1b:7f:03:73:40:dd:8d:24:b7:
                    80:d7:12:32:b5:c1:de:09:78:e0:f8:a2:9e:a6:39:
                    67:32:73:e6:3e:45:5c:65:fc:cf:3d:c8:39:e2:a1:
                    1e:8d:2f:6f:15:cf:36:a7:13:d7:3b:2d:5e:5b:04:
                    18:62:5d:eb:c9:66:18:5b:e5:85:44:65:73:35:fd:
                    c1:eb:df:00:15:62:4e:b2:09:c9:ab:da:6c:5d:a7:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:32:F0:4D:B0:36:56:28:19:31:4F:88:5E:B3:F7:25:E9:6E:8D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/54a12d1c-a5f0-3d12-9a29-acb8acf11775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb08::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:94:c9:83:2a:5a:0c:6a:af:b7:ce:dd:cb:95:f3:66:b9:
         24:18:7f:49:23:de:6f:39:49:e7:46:be:99:ac:fe:27:3d:8b:
         b7:26:96:6e:c7:c9:34:27:7c:69:db:8a:b9:0f:7e:ec:3d:a8:
         b0:09:0a:cf:90:30:8f:4f:69:95:ff:21:f7:60:40:aa:db:13:
         ae:ba:db:d0:08:ad:bc:47:a2:10:cd:4f:72:e9:c4:d7:44:67:
         97:cd:4b:6d:85:c5:86:4f:27:40:52:af:8d:78:7f:a3:29:ed:
         c6:06:0f:92:91:98:5f:3d:cf:d2:71:b7:73:40:0a:32:7e:90:
         57:a0:d7:d4:5c:94:59:1d:45:fc:74:e8:38:23:16:39:20:35:
         24:a2:59:85:59:9c:d5:3d:f3:df:b7:3a:c2:35:c4:44:47:e4:
         7b:86:40:a3:fb:e3:4e:ad:de:e9:c0:00:1c:37:c6:aa:ce:b7:
         de:74:c2:38:e7:ad:f7:16:cd:f2:d9:93:b4:c5:3e:46:37:db:
         43:cd:56:59:79:de:60:61:3a:fa:d0:92:70:09:03:21:2f:96:
         25:87:6b:02:1c:fc:fe:58:b4:d6:13:ee:2a:ce:77:a1:6d:0e:
         1a:fe:71:0b:03:38:04:9e:e4:67:10:d4:c5:70:df:ca:b7:0e:
         71:19:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:45 2025 by rpki-client