Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/c0d03127-3f45-3693-9975-2d19725935f0.roa
File:                     c0d03127-3f45-3693-9975-2d19725935f0.roa (raw, json)
Hash identifier:          BfQpi7llnZ80en5UD2C4We1ZOdaq0+OW0PutjNB3gW0=
Subject key identifier:   E5:A8:BC:E6:D8:2A:6C:44:C9:01:29:9D:E9:5D:40:8B:3C:03:91:E3
Certificate issuer:       /CN=ce78c233-fea8-412e-b7ae-1080a457c01e
Certificate serial:       010D0C9F4328584AEBEB26E1BF168B0ACBD3DA80
Authority key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/c0d03127-3f45-3693-9975-2d19725935f0.roa
Signing time:             Wed 20 Aug 2025 17:47:07 +0000
ROA not before:           Wed 20 Aug 2025 17:47:07 +0000
ROA not after:            Tue 18 Nov 2025 18:47:07 +0000
asID:                     16509
IP address blocks:        2602:f669::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:eb:26:e1:bf:16:8b:0a:cb:d3:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce78c233-fea8-412e-b7ae-1080a457c01e
        Validity
            Not Before: Aug 20 17:47:07 2025 GMT
            Not After : Nov 18 18:47:07 2025 GMT
        Subject: CN=1792813d-6676-4781-abae-33e3f2e4152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:ef:59:16:17:7d:7a:8c:7c:18:22:2f:50:
                    d5:3e:e4:45:9f:e7:3f:54:70:56:bc:b1:b2:95:7b:
                    b7:df:62:97:2a:ed:31:5a:6b:6a:cf:eb:80:4e:22:
                    cd:81:f7:75:a1:63:9f:8b:e1:6c:6e:5f:cf:f6:45:
                    a4:57:34:50:18:b0:71:bd:43:ee:1d:1b:3f:bb:5e:
                    2f:19:f3:cb:7b:82:43:63:3b:15:c1:13:f1:2a:43:
                    5e:3f:79:ba:fa:c9:bc:6e:07:d9:a2:87:dd:f8:1a:
                    39:9d:7e:6c:8f:48:70:73:b2:d9:33:c3:c5:d9:2e:
                    55:c2:a6:70:0b:4e:68:ac:81:2b:a0:b3:d8:b8:25:
                    bb:f3:b7:2e:cd:cb:37:d7:53:9b:7d:76:1a:fb:d1:
                    45:0d:e9:30:ca:ba:8e:38:b6:ee:f7:f0:42:54:3d:
                    41:91:82:08:af:b3:3d:15:2a:6d:ab:cd:73:75:40:
                    d1:5c:4d:e7:5c:66:23:ed:5d:33:e9:84:80:4c:e3:
                    ce:92:83:2b:57:3d:fc:a9:d7:a5:a6:1e:b9:9d:91:
                    1d:51:8b:0f:20:66:ad:5c:cf:af:5e:5d:53:ad:b8:
                    1a:14:9b:5e:97:ba:26:76:d2:f4:88:19:29:6d:bc:
                    6e:47:28:3a:37:c0:71:cc:a6:7f:e0:e4:4b:e9:81:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:BC:E6:D8:2A:6C:44:C9:01:29:9D:E9:5D:40:8B:3C:03:91:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/c0d03127-3f45-3693-9975-2d19725935f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl

            X509v3 Authority Key Identifier:
                keyid:4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f669::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:38:38:2b:91:46:ee:17:b5:cd:ea:ae:ef:83:ac:53:61:26:
         0a:8c:25:dd:52:f2:5a:6f:ca:c6:28:6b:31:e5:bc:a3:12:39:
         df:43:78:ad:00:68:e5:fd:31:76:ba:68:32:89:10:ce:d8:e0:
         a9:11:95:c1:ae:bc:f0:74:16:d7:dc:0a:0e:0a:9d:a3:d5:95:
         f1:21:63:97:ce:e2:92:db:07:5b:fc:47:07:98:34:54:c1:58:
         10:f2:be:0e:fd:b6:43:81:54:7e:c6:11:6c:4c:90:97:3b:da:
         87:c9:6a:89:22:a0:92:23:54:67:62:19:6e:9a:94:40:7f:26:
         7c:85:0f:16:11:7a:45:4b:cb:5c:87:e4:3e:ac:ce:a7:e0:d4:
         96:09:9f:9a:36:e5:23:96:2a:cb:84:a4:94:31:a7:1b:86:56:
         11:19:dd:fd:cf:66:e3:63:cc:c2:29:bc:aa:8b:ac:7a:44:6d:
         84:43:b9:4f:01:be:1a:3e:74:54:cb:92:e4:b2:00:2f:92:3c:
         5b:f2:e1:50:94:6b:bb:21:04:b7:dc:62:34:ee:10:b3:79:07:
         94:7e:82:14:70:4f:c0:97:cc:12:26:5c:b7:6b:8e:18:23:4b:
         dd:5c:72:75:7b:fd:3b:ae:40:a5:3b:11:8b:35:11:6b:a9:07:
         8b:8c:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:23:02 2025 by rpki-client