Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
File:                     cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa (raw, json)
Hash identifier:          2Pk+rcz9fCM9fMaW8ep4njB3vWQoUWTpWG7jxSpGnPI=
Subject key identifier:   93:F9:0E:5F:B9:E6:8C:65:00:02:79:52:0A:4D:1C:34:4E:7C:CA:D6
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584B4D11C79CA284AC999DABEE00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     36829
IP address blocks:        2602:fc64:ca10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:c7:9c:a2:84:ac:99:9d:ab:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=e7bb9335-88f3-45ad-b429-a42e90cdd0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:0d:8b:dd:d0:99:54:ad:37:5c:ca:a4:3f:
                    1b:14:5a:ca:46:f3:03:bf:64:41:d5:7e:65:e6:0b:
                    d5:c6:3b:d2:cd:cb:2b:84:25:74:f3:dd:22:09:87:
                    26:b3:b3:8c:7d:b1:32:4b:f3:eb:ba:5d:3d:d4:ad:
                    29:51:25:4d:86:48:59:73:66:b3:79:69:c8:58:e0:
                    ec:b7:29:70:d3:62:11:d4:98:b1:e3:02:d1:24:4c:
                    54:b4:bf:70:23:d1:48:7f:fb:f2:3c:eb:2d:93:43:
                    43:5c:12:8e:62:d3:53:71:f7:14:4b:04:61:7f:ad:
                    23:8e:d3:6a:41:20:53:07:d5:73:3e:f5:26:f7:1a:
                    b4:10:ac:e0:27:25:1f:03:09:08:3b:69:08:b5:bc:
                    4d:cb:27:54:e9:46:b8:3c:88:ee:56:40:49:21:45:
                    cb:f4:86:07:ad:65:52:07:3d:84:e7:bb:1a:79:06:
                    2d:3c:84:ee:1d:d2:a8:75:e8:34:29:e8:a0:70:c3:
                    0e:e8:a8:ba:b8:68:0e:5f:9d:79:a1:15:e2:a1:c5:
                    4a:27:04:b5:cb:03:13:cc:e6:b0:c7:4f:50:73:17:
                    e1:42:7a:9c:76:b9:2f:68:ea:9c:a7:83:a5:90:d3:
                    68:c3:94:a4:24:5e:62:e6:b3:9e:d6:db:ca:e4:cc:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F9:0E:5F:B9:E6:8C:65:00:02:79:52:0A:4D:1C:34:4E:7C:CA:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/cd2a93b1-5ca2-3bcc-bff8-9f8dea158690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:ca10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:d3:0d:37:22:ad:bd:b5:55:80:6f:63:9f:a8:15:7d:d8:
         24:7d:fa:2a:cb:87:91:73:c9:06:6f:30:0f:49:11:77:e9:f6:
         ca:f3:b1:59:44:71:fe:63:20:dd:48:a6:71:b3:c0:83:4d:1d:
         ca:c3:cf:5d:cf:12:ec:ca:de:bf:02:2e:52:a7:a4:a7:43:d7:
         94:a2:9d:de:bd:b7:e7:7d:67:11:b2:13:d0:85:d1:71:d5:65:
         72:69:f1:ac:05:3a:3b:6d:7d:d8:98:60:45:77:67:96:28:2b:
         a7:0d:1f:d0:ed:14:12:ff:83:f2:c0:f2:5c:8a:3d:ec:00:aa:
         a2:09:e8:c7:fd:37:5e:c7:a7:c8:12:8f:0b:83:f2:d8:eb:44:
         5f:9c:db:81:10:df:34:a9:a1:a7:db:ac:df:0b:47:21:af:5c:
         76:b3:31:04:65:30:ff:a7:2e:36:c9:df:ec:a4:ff:99:e1:92:
         52:2d:77:c6:e3:ee:92:01:a9:62:68:b3:2c:29:25:c4:33:b8:
         d0:18:67:95:a7:ce:dd:63:24:38:33:aa:97:f0:8a:c1:33:9e:
         e5:53:4d:4a:c8:5d:31:55:8f:43:9a:7e:a7:c0:40:c7:ee:79:
         53:dc:7e:61:e4:4f:84:d0:d7:59:16:2d:5e:eb:4c:e6:17:1d:
         d2:0d:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:50 2025 by rpki-client