Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa
File:                     20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa (raw, json)
Hash identifier:          taF63MKYqIOIb0JzQwHGIXVeZfYTGl4YLVk6v5KEGjM=
Subject key identifier:   C9:02:86:CA:AB:99:0F:51:E7:C0:51:D7:EB:52:F0:42:C3:53:0F:D2
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B48E1B5256F0CD669CEC6E980
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     174
IP address blocks:        2602:fd92:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b5:25:6f:0c:d6:69:ce:c6:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=ef777b2a-3c46-4a9b-9db4-5e2f29cc1e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:80:13:7a:14:67:3c:f6:1c:99:1b:68:63:
                    44:4c:13:c3:7e:af:ac:96:1b:6f:47:c8:ef:62:6e:
                    f3:04:bb:d1:13:51:cf:81:95:3f:92:23:ea:b4:f0:
                    0a:e6:69:c5:c0:f6:a1:ba:3e:9d:88:03:3c:50:26:
                    5c:64:8f:40:44:8e:31:26:00:0e:d1:2f:07:c0:75:
                    81:0d:ca:44:ac:41:92:ef:f0:19:87:3b:c6:2c:09:
                    89:54:f9:13:77:06:ee:f0:c5:10:59:f9:8f:e2:2f:
                    00:cf:0f:66:f0:bc:f8:37:45:09:7e:f3:37:b8:30:
                    91:b4:14:b6:8e:7d:8f:07:cf:0f:aa:52:15:9e:b4:
                    c9:64:d2:98:cd:c0:d5:a6:cf:18:70:69:f3:1e:af:
                    ed:43:e7:5a:70:b4:49:01:15:08:42:51:b8:7a:4f:
                    c4:73:91:71:fd:38:ab:96:b8:c3:b8:24:90:7f:42:
                    8e:1a:78:3e:42:54:d6:d8:af:e6:bd:55:22:06:e3:
                    d1:4e:27:83:d9:d4:7a:73:9d:23:2b:8b:d4:e4:91:
                    bc:ab:20:00:4c:18:0b:a2:03:0f:ec:19:77:be:17:
                    b0:2a:2d:63:1d:a7:6c:2b:84:ed:df:c9:53:38:85:
                    a1:c7:c3:cc:f4:27:29:db:87:fc:78:31:28:5b:45:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:02:86:CA:AB:99:0F:51:E7:C0:51:D7:EB:52:F0:42:C3:53:0F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/20fe9757-1085-3d95-b6cd-1eb2c897d7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:07:6a:7e:e1:99:db:35:90:96:a4:f3:ce:f2:a4:6e:83:de:
         50:a7:02:69:ea:92:02:09:bb:55:1e:24:1d:7c:80:29:e8:75:
         64:99:a3:99:bb:c2:83:a5:0f:86:f9:9b:02:6f:ac:f7:6a:99:
         5b:98:8c:3b:6d:16:86:d1:9c:39:a2:12:0f:c2:90:d1:31:98:
         c1:7e:2f:7d:22:96:57:5d:00:9d:ff:4b:5e:93:b1:b2:77:41:
         d5:55:68:bf:2b:01:ff:84:1a:33:f9:4d:52:0c:4f:7d:c3:f5:
         13:1e:43:93:3c:aa:e0:13:23:75:b8:30:7e:ab:d2:7e:fc:3c:
         47:13:6c:db:07:1e:e8:a2:5c:2c:b6:00:2d:b4:00:1b:60:82:
         4c:da:bd:07:d4:b6:e1:88:5a:71:6d:28:ff:4e:f8:5e:dd:22:
         a9:fe:c7:9d:68:c0:82:4f:79:01:97:80:af:ae:e7:9d:cc:75:
         46:92:83:05:fa:1f:b9:10:c3:5e:da:ac:da:21:d1:73:b4:12:
         17:36:ba:7a:d2:b8:a6:ac:73:e2:36:59:ee:25:89:68:46:57:
         d5:a3:4a:b8:e3:bd:3c:5e:e1:15:b8:d0:5e:d8:35:6b:76:f8:
         c6:5e:8e:6f:e3:d9:13:31:6d:47:6e:c9:32:66:bc:81:47:10:
         59:74:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:39 2025 by rpki-client