Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa
File:                     5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa (raw, json)
Hash identifier:          TlA+TGik+sdrHxHiu4OgP8i4Y0tVJvsoW6t7mOIUcqc=
Subject key identifier:   BF:9A:8C:67:9C:B9:47:AE:D9:70:E8:FD:70:96:43:8D:C2:FC:96:72
Certificate issuer:       /CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
Certificate serial:       010D0C9F4328584ACF70FF5A15697FE548F8ED00
Authority key identifier: B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     394542
IP address blocks:        2602:f962::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:ff:5a:15:69:7f:e5:48:f8:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4d94f-b4d5-447a-9417-908a0f5a404e
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=0463d4ee-95d7-494f-9d41-c758676293ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:44:3a:a3:cc:2d:f9:7d:17:d9:c3:3a:ee:
                    2c:de:ae:12:39:5c:68:a0:2c:ef:32:7a:67:46:6e:
                    c9:70:40:2d:9e:fc:be:58:2c:3e:21:ac:d8:51:81:
                    94:c3:66:67:69:ed:da:25:c0:e8:f3:c3:75:77:de:
                    97:45:fe:a0:ba:53:7a:c1:28:5a:da:cb:2c:92:34:
                    53:d0:9b:c9:22:5a:a4:8f:14:0f:68:7e:44:e4:86:
                    e6:9a:3f:38:2d:61:50:19:33:aa:fe:86:98:da:5a:
                    71:45:70:6e:73:3b:8e:21:a8:21:fa:a8:36:21:53:
                    7a:a1:ef:99:39:ad:9b:c1:4f:44:60:80:00:d7:5e:
                    25:5c:a2:b6:7a:1c:26:88:e1:3b:41:35:73:b1:74:
                    18:77:c4:be:4b:c9:23:1d:f4:31:bb:d6:7b:43:be:
                    06:ac:b0:6f:fc:f3:43:d4:fa:71:65:26:25:de:ab:
                    1b:e6:af:af:7b:a4:71:0e:a3:af:54:0d:2a:7a:0c:
                    77:14:6a:35:b1:07:b8:6e:23:15:d0:97:1d:5e:8b:
                    35:e2:90:b4:e0:82:a8:50:9c:bd:7a:c5:72:0f:49:
                    b5:d9:c3:45:3c:b0:e8:0e:cd:2e:fb:ca:f8:fc:53:
                    35:56:03:6c:14:43:ef:85:93:67:40:e1:1a:62:08:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9A:8C:67:9C:B9:47:AE:D9:70:E8:FD:70:96:43:8D:C2:FC:96:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/5f3d3503-d5eb-3f8d-b05f-dc360cf3d953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e/55a4d94f-b4d5-447a-9417-908a0f5a404e.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F8:B7:36:93:7F:76:9E:25:D8:97:09:C9:60:7A:A6:D9:0E:3C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55a4d94f-b4d5-447a-9417-908a0f5a404e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f962::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:4b:8e:86:5d:eb:e1:67:b2:75:9a:2f:a4:5b:0e:64:65:
         25:3f:52:a3:6f:b4:98:3d:8a:90:df:94:c2:9a:55:79:7c:da:
         93:cd:af:d6:ac:60:36:ea:92:41:86:0e:af:8f:85:25:11:95:
         2d:6b:1e:8d:4d:ca:0f:3b:00:9f:1c:74:8c:b0:a2:c6:35:66:
         e1:2e:66:67:ae:12:52:ce:e4:c3:fe:77:48:e0:b9:47:7a:c4:
         a9:2b:aa:0f:c4:c4:d8:37:12:17:54:b4:27:59:9d:79:d5:90:
         f8:d1:69:44:36:f5:98:9c:8e:b9:20:a6:e3:51:81:12:80:43:
         86:55:74:62:b4:b4:e7:f5:e5:07:2d:f1:78:b5:da:4f:80:66:
         80:55:9e:ea:ae:27:7b:35:24:ca:e4:27:dc:1c:e5:f1:6b:00:
         3e:ac:7f:4a:da:da:e2:11:cc:24:ec:55:34:da:2a:70:88:1c:
         e5:7f:4d:56:ec:12:3b:fd:07:64:de:2d:9c:e3:1e:3b:15:c9:
         cf:6d:6a:85:50:a6:5b:19:3d:73:1e:13:32:72:fa:d7:43:e3:
         fb:40:12:9a:05:d8:6b:f3:3e:ef:54:87:03:8f:f2:f7:ad:1b:
         0d:cd:bb:53:ed:13:6b:a6:59:38:80:04:50:27:70:ac:ba:4d:
         41:5a:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:45:50 2025 by rpki-client