Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
File:                     075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa (raw, json)
Hash identifier:          KzJedLpQ42hJMtD5tfKNBcGWEmJ0Jv3J0+65j/GvMuw=
Subject key identifier:   F6:01:60:05:32:AE:D0:3C:4E:20:39:76:50:EB:F5:F1:15:40:89:4B
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584B6A61ED2E8A22D72919D399C0
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     399542
IP address blocks:        2602:f8ef:fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ed:2e:8a:22:d7:29:19:d3:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=6817c540-0075-4b6d-a99a-32532220cc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1c:06:08:fe:b8:4d:f5:89:ec:d9:0b:bf:ad:
                    1a:89:17:92:6c:6d:28:a5:ed:9f:6b:fa:1a:01:36:
                    87:99:ca:a1:9d:74:3a:8d:49:44:39:3f:45:f0:a3:
                    be:8d:ed:6f:ba:87:50:0b:91:65:24:2e:75:3b:be:
                    ea:de:8f:f0:55:ec:ae:4e:8e:4a:eb:82:8d:c4:03:
                    fd:7a:ae:48:3f:8f:27:8b:f3:e2:5d:2b:61:37:44:
                    1a:9b:28:0c:f4:81:96:6e:fd:55:49:cb:e9:f1:dd:
                    73:7e:0c:7c:b2:1d:61:8c:e2:6a:77:a2:d6:5e:28:
                    ca:af:fe:27:cc:41:74:1e:90:0f:61:2b:da:01:e5:
                    ed:d2:81:b6:f1:e6:c1:b6:8d:9e:7f:39:7a:14:fe:
                    1d:16:92:f9:25:80:83:c2:e6:58:dc:d9:bd:fb:c8:
                    1e:63:ee:a4:31:fe:fc:35:ce:33:6f:95:c1:ca:a6:
                    a1:75:f3:6d:17:56:d0:3e:dd:2a:66:0a:26:f0:ef:
                    08:27:78:ca:a9:6b:8c:5b:4d:27:91:a7:bd:36:5a:
                    db:c5:5d:8d:f5:90:19:09:5b:96:a1:80:93:f5:3f:
                    72:46:cc:6f:d9:04:0a:d6:20:37:99:99:6c:8a:de:
                    e6:b6:ac:a9:4b:a7:55:37:a6:a3:8e:af:3e:04:13:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:01:60:05:32:AE:D0:3C:4E:20:39:76:50:EB:F5:F1:15:40:89:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/075de4d6-ac9a-33be-b7cc-f8d6a1002804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ef:fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:bc:b4:42:7f:00:fb:83:1c:4a:98:b5:4b:7c:cd:fa:21:
         8b:30:ba:1a:22:9d:fb:c1:75:a1:03:f7:48:e9:c8:3d:a5:da:
         db:c4:4e:f1:f4:b4:9e:4c:fc:ac:92:16:72:7f:3c:ec:90:45:
         c5:00:3c:ee:52:17:11:3b:be:f4:78:4f:fb:12:21:51:dc:3d:
         07:94:8c:c6:44:cc:33:18:0c:01:e2:3d:39:5d:dc:5a:b6:3d:
         5e:17:15:9e:4c:51:f9:69:88:21:3c:4e:a2:91:bd:5f:b3:22:
         0c:b1:09:3a:a7:f8:ed:85:80:d6:9d:78:5a:a4:e4:0a:9f:4f:
         74:e3:83:3b:b4:8a:57:56:bf:a0:69:e2:06:e9:93:e2:f7:55:
         45:17:71:8d:d6:da:48:ae:73:20:33:4c:d8:33:94:2b:b7:f1:
         6e:d6:ec:30:9f:c0:7f:c5:8c:b3:60:e6:cb:67:62:e4:18:fd:
         5b:bb:9a:9d:07:e1:59:f6:7a:c9:78:4d:d6:73:07:48:1a:75:
         10:e1:75:da:e9:46:09:eb:4e:d6:55:71:5d:94:2a:3e:f6:c4:
         59:de:2d:74:e0:0c:d0:f1:dc:25:59:29:a8:33:09:e2:f6:c0:
         89:b2:3d:1a:94:ba:e2:70:8a:39:f0:7b:65:89:4d:d9:d2:fa:
         85:0b:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:20:04 2025 by rpki-client