Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa
File:                     c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa (raw, json)
Hash identifier:          PstIKErwMYcU2+Si6eIJKLXOn/iz9ZiMem+8mAHU5og=
Subject key identifier:   4F:9E:13:46:B5:A3:3F:03:F3:3C:81:B4:A4:46:6B:0D:31:52:11:81
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584B13D6B800FDDB6323212FDB00
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:fa28:6a::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b8:00:fd:db:63:23:21:2f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=8a9babec-2b7e-4091-aba3-168311c5b344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:f7:e3:92:0e:4d:a5:4b:a1:19:f5:6f:79:
                    ab:27:eb:99:57:b6:56:b4:89:34:ff:80:a6:7c:48:
                    c2:ca:97:fb:ef:72:fc:dd:97:af:75:99:f9:37:f7:
                    47:83:08:9d:47:4e:7e:87:8b:3a:43:18:d9:b0:26:
                    8d:4e:b6:28:6d:aa:64:ac:5c:9a:b0:a2:c9:82:df:
                    41:db:6a:39:8b:9b:f0:8b:97:56:19:03:d4:c0:35:
                    f2:60:07:83:6b:ff:2b:56:48:3d:fb:90:55:bd:62:
                    fe:85:f1:92:57:93:b3:a9:c4:68:c6:d7:54:28:1e:
                    e9:35:b1:66:de:b5:3e:c6:2a:ec:64:ec:a2:a4:8e:
                    00:54:e1:77:a4:03:76:b4:63:10:15:69:78:11:f6:
                    13:be:3d:1f:5e:70:ce:fc:89:d9:97:d2:c2:bc:60:
                    54:11:44:8b:76:7f:43:d6:38:2c:66:3a:47:3a:2a:
                    b3:6f:83:26:e5:3b:6b:ee:af:25:55:86:6f:09:06:
                    aa:66:08:3e:3d:63:be:4f:b7:59:47:52:27:59:2d:
                    b0:a1:0f:74:f8:8a:60:4d:aa:c1:9a:90:44:26:3d:
                    35:5c:62:01:e9:76:c0:d3:c4:ac:9c:de:bd:d3:4f:
                    17:ac:83:3a:5b:10:2d:a0:5d:f4:65:ef:67:6d:ac:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:13:46:B5:A3:3F:03:F3:3C:81:B4:A4:46:6B:0D:31:52:11:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/c0fa5168-bee3-3b81-bf06-4c4ab7f5bcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:6a::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:02:16:db:33:6d:b5:1f:ce:ee:a7:fa:35:4a:35:c4:e9:78:
         db:e8:47:61:c0:02:91:90:8f:03:9f:99:fe:3f:f9:d6:ef:f5:
         9c:1e:8f:22:78:cc:50:14:49:6d:ee:78:bb:b3:89:8f:28:dc:
         49:ef:db:bc:45:83:89:8b:b6:13:88:52:c7:97:fa:d2:9e:16:
         24:2d:35:56:c3:e1:43:67:78:85:db:69:7f:ab:50:ec:13:fa:
         3a:96:f9:66:1b:1e:04:27:82:20:d3:c9:cd:f3:2c:0c:3f:d3:
         f7:35:45:6c:f4:c2:0f:88:5a:6e:56:f3:69:55:3c:c2:33:a7:
         61:b9:89:0b:fb:48:ee:1c:14:9a:be:17:85:2a:13:9b:70:e8:
         35:10:26:d7:d1:3c:e4:dc:c8:d0:01:b6:ae:2b:15:6f:37:68:
         24:64:74:e2:3d:b8:ee:ea:ee:39:1f:4b:9e:11:77:80:6c:d9:
         92:d8:66:d0:bc:4f:ae:93:b1:54:bd:ee:fa:f3:23:38:f4:6d:
         fa:a5:34:6c:a8:09:29:da:b0:df:e9:4c:08:e8:0a:7d:45:52:
         2c:78:56:f5:98:4e:e3:60:80:c3:bb:d1:e3:26:79:49:37:8d:
         aa:03:a6:44:1e:84:f8:03:63:0d:ce:47:0c:a6:69:0a:75:bf:
         89:da:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:02 2025 by rpki-client