Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa
File:                     829d2753-deec-33aa-8527-38223ee68443.roa (raw, json)
Hash identifier:          YtRonJYjPeDqaD1EmpyalnqKndT3UUNJLXVe3L9FLqk=
Subject key identifier:   EF:4C:56:BF:FB:18:89:0C:08:E0:78:6A:07:85:78:4B:B3:3D:8B:7E
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584B13D6C57A58624878ADAB3DC0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     26042
IP address blocks:        2602:f919:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c5:7a:58:62:48:78:ad:ab:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=493e44c1-db18-4011-a819-7765779596bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:fe:0b:7e:ab:c1:31:b7:0d:f8:85:9b:b0:
                    c0:32:dc:fb:4c:b5:5c:2f:61:9c:93:22:c6:52:09:
                    fb:91:85:41:72:08:47:59:d9:0f:32:23:98:e8:1e:
                    5b:98:bd:4e:51:0c:6e:01:e7:ac:9c:fe:9f:11:31:
                    a9:02:88:ff:ee:f7:b3:d4:aa:54:7d:c7:f8:37:8e:
                    2d:0d:1b:d3:8d:be:29:c5:f1:41:36:04:8b:02:46:
                    cb:a3:c8:c5:9d:c1:37:73:5c:4c:f4:1e:40:af:94:
                    93:6c:8b:bf:b8:bb:48:e9:0b:43:3a:c3:76:71:06:
                    f9:e4:92:c5:3e:24:c9:2d:ee:5d:0c:03:de:43:2b:
                    83:bb:b9:04:ba:a8:0e:f5:33:fe:95:7b:b7:06:30:
                    6c:d7:4f:fd:22:ef:b7:e1:19:b0:8c:91:f0:a8:81:
                    25:c4:5e:1d:a4:86:42:2d:cf:8a:7d:b9:19:74:cd:
                    18:12:eb:28:48:a6:6e:b4:ee:f2:15:53:a3:60:05:
                    75:8f:e6:4c:04:28:69:70:aa:59:37:26:6d:4b:ec:
                    5b:d9:0a:93:57:86:c6:b2:57:c9:2c:93:19:e9:dc:
                    17:ed:e4:8d:9f:32:6b:10:21:f7:c2:4c:f8:f2:d8:
                    e5:07:3d:77:fd:38:46:e4:4f:61:4a:1e:f2:5d:32:
                    d6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:56:BF:FB:18:89:0C:08:E0:78:6A:07:85:78:4B:B3:3D:8B:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/829d2753-deec-33aa-8527-38223ee68443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:41:cd:ee:2a:08:a1:ae:85:98:97:dd:be:7d:bd:24:1b:
         32:a0:36:e8:56:78:49:04:b7:6d:f4:b4:5d:0e:84:ec:df:17:
         d6:cb:1d:90:05:9a:c6:35:52:a1:19:65:ef:29:e2:61:d2:37:
         d1:b8:be:dc:82:ea:9a:cc:d6:9f:6b:7d:e4:b8:28:44:f6:74:
         36:78:59:c4:3b:0d:75:17:d8:98:bf:94:5a:c7:9d:c6:20:42:
         12:43:ce:99:c1:9f:49:82:e8:9a:a0:7f:aa:2f:e9:6c:88:c3:
         fd:2b:8f:d4:ae:5d:1c:4f:bd:34:a2:a3:65:d0:2a:08:48:cc:
         16:18:8b:b5:fe:7b:5e:bd:ba:3d:c1:4d:d6:89:b7:bd:53:25:
         7d:19:4b:26:71:99:27:11:00:be:93:58:a2:fe:8f:a6:db:37:
         65:a4:f5:82:a8:53:be:20:56:74:52:5a:18:ca:1c:8d:81:57:
         8e:c7:fc:0e:79:18:ef:a2:53:ef:f0:60:bd:f9:99:86:00:19:
         d5:cd:30:c1:99:f1:be:8a:f9:98:a5:25:86:d9:31:9f:f3:81:
         83:69:b9:6f:e5:e0:0e:cf:fc:02:46:f9:ea:4b:78:fe:a5:77:
         a5:70:ce:2f:5f:54:6c:62:33:3a:73:0d:41:f6:a8:79:22:0f:
         b1:b5:ad:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:55 2025 by rpki-client