Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa
File:                     460e511a-a065-33a4-9b94-66aaa249410b.roa (raw, json)
Hash identifier:          q/PFyIzuEfsHHxCdTb8ulSyh8ktUp9NI61MO32VTLv0=
Subject key identifier:   84:3A:24:61:F1:5E:17:D7:C1:22:D7:3A:EC:16:F7:09:2B:9A:F0:72
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584B3DBA2BEE1322DD4A176EB9A0
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     398338
IP address blocks:        2602:f605:100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:ee:13:22:dd:4a:17:6e:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=fa8a8efb-26ea-40a3-8c41-2d4f9141a28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:b4:14:b5:18:6f:65:fa:29:68:92:03:4b:
                    ce:18:85:5d:69:24:55:bf:84:7d:17:e1:1f:ec:a7:
                    d3:8d:36:9f:5f:d8:6d:2e:13:ed:4d:ae:dd:18:25:
                    0c:0a:b4:e5:8e:79:a4:1a:c4:e1:72:a8:7c:ef:74:
                    82:45:c2:80:76:2c:73:c1:f4:45:61:0b:50:bf:9c:
                    ce:3e:38:a0:d9:ab:10:5d:6c:19:16:2c:ec:2c:41:
                    a6:49:78:43:ba:ad:69:e7:90:50:08:18:a9:78:4c:
                    77:57:6b:a1:46:79:9a:9f:b5:aa:6f:0e:90:eb:6b:
                    53:60:e9:49:6d:e3:f6:b5:7f:3c:e4:de:c8:af:12:
                    52:0d:93:e8:17:71:9c:52:32:e6:20:10:69:31:12:
                    be:52:bf:9b:4e:d7:5f:8f:e7:0a:23:e5:ee:06:be:
                    8c:c0:f7:b4:99:13:9f:11:93:2e:5d:70:08:c5:dd:
                    c2:fc:6d:3e:86:49:98:1c:c2:ac:6c:d4:9d:ff:46:
                    f1:df:ea:45:69:d7:ac:6c:09:ed:95:0a:36:df:26:
                    50:31:07:7f:46:dd:78:5d:ce:34:5d:ed:5f:0c:46:
                    96:00:87:f1:fe:81:dc:92:d2:83:b7:a0:62:c6:a9:
                    34:9d:46:28:d9:42:6b:96:e1:63:31:67:72:09:a3:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3A:24:61:F1:5E:17:D7:C1:22:D7:3A:EC:16:F7:09:2B:9A:F0:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/460e511a-a065-33a4-9b94-66aaa249410b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f605:100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:39:14:ca:09:22:2e:1b:a1:7e:a8:a5:d3:08:7d:df:db:4f:
         ac:b3:24:58:f4:31:16:e9:af:07:6e:fd:01:71:b9:19:9a:91:
         54:82:61:d4:ff:a4:9d:21:e7:da:9e:cf:45:e8:74:ce:ea:32:
         ba:45:7f:b0:05:42:14:5d:da:05:b6:cc:d6:79:88:e7:9b:70:
         8b:53:f1:70:50:d5:12:ad:ce:52:4b:36:a3:d6:46:4c:cb:fa:
         4d:20:a9:19:0b:f6:4d:62:b9:d4:8e:56:7e:9b:31:e9:15:7e:
         b3:6d:e7:ac:9a:42:ec:a5:7b:52:99:37:f4:95:35:f1:56:8b:
         e9:d6:55:3c:34:78:c8:73:7a:67:ed:5e:84:12:c6:57:8f:24:
         03:c8:00:3b:38:82:49:4f:19:62:aa:35:2f:1b:f4:8e:bc:1d:
         6f:4c:3c:8e:5d:77:8d:05:48:e0:ad:ac:ba:6c:c6:dd:19:a8:
         8f:c5:b7:5b:56:42:f8:02:64:ec:2e:cd:08:35:86:1a:d1:34:
         22:c3:4d:66:98:5d:4e:f9:12:64:3c:6f:28:f1:c6:34:15:86:
         ae:cc:0b:8d:f6:50:57:60:93:4e:a5:0e:3e:d5:ee:c2:17:c3:
         53:ca:b7:cd:1e:80:16:a9:49:b2:a2:dd:b1:74:a6:ae:4f:72:
         be:16:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:26 2025 by rpki-client