Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/682c1cbf-cdae-32df-b90f-bc404027aab0.roa
File:                     682c1cbf-cdae-32df-b90f-bc404027aab0.roa (raw, json)
Hash identifier:          PbvvpFYIlAcbcME/o3satXxSltkBun6VX1hPC5yNJFo=
Subject key identifier:   B4:F0:21:11:6B:47:69:36:9F:B5:8E:EE:98:D6:B9:4C:BF:E8:FF:CA
Certificate issuer:       /CN=d57f8311-a2bb-4ecf-923a-6d3c8526cbc3
Certificate serial:       010D0C9F4328584A55778B8E326E9A12EF4E4440
Authority key identifier: 09:64:7B:1E:77:58:A2:36:98:D5:DA:8D:8B:29:11:D4:F8:6A:37:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/682c1cbf-cdae-32df-b90f-bc404027aab0.roa
Signing time:             Fri 27 Jun 2025 20:25:20 +0000
ROA not before:           Fri 27 Jun 2025 20:25:20 +0000
ROA not after:            Thu 25 Sep 2025 20:25:20 +0000
asID:                     401371
IP address blocks:        2602:f608::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:77:8b:8e:32:6e:9a:12:ef:4e:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57f8311-a2bb-4ecf-923a-6d3c8526cbc3
        Validity
            Not Before: Jun 27 20:25:20 2025 GMT
            Not After : Sep 25 20:25:20 2025 GMT
        Subject: CN=cb88ea65-f33b-4804-bf50-ef49846513bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:5d:bf:e6:3c:de:48:7d:90:a9:81:be:b4:
                    24:14:22:ae:6b:a7:b4:a3:74:12:47:30:71:91:aa:
                    3d:44:73:fc:9c:5d:a9:af:87:80:17:17:67:9c:2e:
                    52:d3:81:19:42:57:3b:05:a9:92:cf:ed:6c:f5:87:
                    af:3f:eb:56:d9:94:8f:6d:3a:82:0c:71:5a:8a:85:
                    58:39:d6:a3:ac:75:9a:ae:82:6f:1e:0b:d8:4b:d7:
                    a9:9e:1f:4f:69:1f:5b:90:3a:dc:c1:5f:b1:15:95:
                    be:7f:db:54:24:3d:a6:c9:8c:6c:d0:be:3c:9e:4c:
                    5d:20:23:99:91:b0:16:2b:fa:15:18:a8:09:b8:08:
                    e9:a4:60:83:79:24:ef:7d:ca:c0:27:e9:7d:e1:2c:
                    25:34:ff:50:18:15:4c:15:dc:0e:07:03:13:bc:a0:
                    c0:9b:1d:d3:53:24:86:08:ed:f5:1b:6f:0e:1d:5b:
                    1e:d0:72:b4:06:68:a6:22:8b:6e:7e:15:58:bd:6b:
                    ab:71:1d:e0:ec:4c:ff:16:d5:09:b8:7d:2a:21:ca:
                    5a:8b:e7:a5:a3:c2:0d:22:91:86:99:64:5f:1d:3a:
                    66:67:f5:54:d0:fe:7b:d2:22:aa:97:90:ec:b7:1c:
                    c5:ee:77:d6:45:b1:6d:1d:28:3c:1b:04:40:3a:6b:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:21:11:6B:47:69:36:9F:B5:8E:EE:98:D6:B9:4C:BF:E8:FF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/682c1cbf-cdae-32df-b90f-bc404027aab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.crl

            X509v3 Authority Key Identifier:
                keyid:09:64:7B:1E:77:58:A2:36:98:D5:DA:8D:8B:29:11:D4:F8:6A:37:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d57f8311-a2bb-4ecf-923a-6d3c8526cbc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f608::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:31:fc:f1:9e:7b:10:28:eb:67:71:51:02:d7:19:42:71:
         bf:e2:45:39:cc:a8:62:1c:27:a5:99:29:11:6b:66:3d:c9:0d:
         15:42:87:19:7a:38:2b:cb:98:1d:4f:ca:2f:65:0b:a7:91:37:
         0a:d2:e3:ac:ce:97:88:a1:16:2f:2b:ca:e8:51:72:00:08:96:
         a8:3a:1b:50:1c:74:9f:6b:b3:eb:74:7a:8a:13:44:04:a0:43:
         30:e7:05:75:ee:cc:ba:78:ac:47:25:88:0a:c0:97:48:75:88:
         f7:66:db:5f:ed:00:be:c2:d1:05:f7:c2:ec:81:cc:c1:2c:6a:
         c3:4a:0d:55:ff:9b:47:b1:2d:cc:b5:91:9d:88:a4:2a:3d:66:
         13:7e:27:7f:42:7e:b9:e5:f5:50:22:e3:66:86:06:83:a7:31:
         f4:f7:26:d2:d7:01:54:fa:25:69:fb:20:de:50:dc:56:6d:8c:
         ce:38:90:17:f4:46:9d:71:22:6e:54:08:9e:32:ad:6b:0b:b7:
         4c:77:f6:d5:4d:10:b7:05:b8:b0:3d:5d:39:8c:16:74:87:26:
         cd:d4:2e:1e:89:62:c0:ab:01:3b:69:58:4f:22:63:a5:eb:87:
         95:e9:22:c5:0e:e2:59:82:dd:18:52:66:e8:77:e8:62:34:19:
         36:e8:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:37:42 2025 by rpki-client