Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa
File:                     467816f8-d692-3a30-9a77-8e6fb95b50a6.roa (raw, json)
Hash identifier:          7xAmj0eDX5keCz378mFXxrZ+/kHWl/8w5Z97g/DfEng=
Subject key identifier:   75:E0:D7:41:3B:39:25:E0:2E:17:AD:B9:72:68:B1:5F:99:B7:DD:F7
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F4328584B25FC2F69EC25EB70B688A2C0
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:fb10:40::/44 maxlen: 48
                          2602:fb10:50::/44 maxlen: 48
                          2602:fb10:60::/44 maxlen: 48
                          2602:fb10:70::/44 maxlen: 48
                          2602:fb10:80::/44 maxlen: 48
                          2602:fb10:90::/44 maxlen: 48
                          2602:fb10:a0::/44 maxlen: 48
                          2602:fb10:b0::/44 maxlen: 48
                          2602:fb10:c0::/44 maxlen: 48
                          2602:fb10:d0::/44 maxlen: 48
                          2602:fb10:e0::/44 maxlen: 48
                          2602:fb10:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:2f:69:ec:25:eb:70:b6:88:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=6daad03c-c4c1-4297-a5c5-87b52ad257db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:e0:91:48:8f:46:93:f6:1d:d3:d4:88:e8:
                    14:06:63:65:48:61:34:f9:73:f9:8f:8f:72:5a:ce:
                    f6:72:72:0d:29:dc:e7:27:7f:9e:db:7c:d6:2a:35:
                    fc:e1:41:92:82:20:00:08:1d:72:a3:5f:ff:b0:0b:
                    e3:1b:aa:96:0c:d1:bc:3e:b7:88:ac:73:ff:91:7c:
                    6b:45:9f:fd:31:83:f5:0b:98:c2:82:9f:35:db:cb:
                    e7:30:78:df:09:2d:67:a5:88:06:10:eb:58:d4:fc:
                    a6:2a:0a:02:9a:0b:71:c5:00:9c:bd:02:4b:c1:c7:
                    7d:10:3a:04:72:d9:6a:c6:ce:ad:5f:bc:5a:b9:07:
                    2e:7a:a0:57:7d:f5:30:62:e5:c8:b9:1b:f7:f6:51:
                    9c:40:26:cb:c6:2a:94:85:72:34:57:6e:5b:a4:d0:
                    71:6a:53:9c:52:de:17:55:f7:71:28:f7:af:8d:ad:
                    d6:ce:98:99:09:36:13:9c:3a:4c:27:e9:17:c4:7d:
                    7e:c3:b6:7e:69:05:dd:66:ab:ef:9b:0c:7c:54:1b:
                    34:09:b5:d3:09:c2:48:df:d4:27:3f:5a:60:40:08:
                    ab:f8:3a:96:65:1c:22:d0:c8:da:20:d2:15:af:27:
                    a5:b9:4f:9d:8f:37:36:af:57:dc:f4:dc:01:d3:e0:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:D7:41:3B:39:25:E0:2E:17:AD:B9:72:68:B1:5F:99:B7:DD:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/467816f8-d692-3a30-9a77-8e6fb95b50a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb10:40::-2602:fb10:ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:ea:12:31:ed:4c:c6:c8:c9:c2:24:c2:7d:16:52:de:e4:
         ac:0c:53:37:af:4b:79:48:2a:64:b7:e8:a1:86:d1:fd:ec:c1:
         13:68:04:0a:a4:df:15:f6:78:85:89:52:55:1c:6e:18:13:c1:
         80:05:6e:ba:f0:2a:c0:17:a7:fe:de:ff:90:bc:db:28:b4:77:
         80:d2:71:cd:93:c9:05:63:3e:0b:1c:82:d0:8a:0d:38:d8:e1:
         8c:67:f0:54:cd:23:05:1a:5e:e3:a8:06:98:35:2e:47:92:ad:
         ac:5e:84:54:b6:96:5c:0b:fe:6d:61:1e:74:e4:fa:0e:9c:90:
         a7:98:3c:0b:79:bd:08:45:5a:7e:af:39:e6:f5:2c:83:d0:0a:
         3f:1b:9c:a9:2d:c7:ee:a5:b3:3f:f2:34:e1:26:56:b2:1c:37:
         98:af:8b:97:c8:a6:45:28:1b:6a:84:ab:e5:d3:99:af:b1:19:
         62:76:53:80:3a:bb:d3:95:8f:cf:a4:10:3c:42:45:23:18:b7:
         40:a1:df:bf:2b:39:6c:e9:17:d1:3c:3e:2b:93:ef:ed:84:09:
         3a:7a:87:6a:3c:68:60:9e:db:e7:fa:1d:3b:b6:2a:6c:d2:13:
         ea:49:fe:4a:04:14:a1:ee:87:6e:13:5d:d3:bb:51:fb:1b:9d:
         8f:98:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:19 2025 by rpki-client