Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa
File:                     aef94748-7b48-37ec-8326-7a31f7a87ab7.roa (raw, json)
Hash identifier:          bLarVIyRCaLKy7JKSNHrewrmsErEjoN1nJa0S2zx/7s=
Subject key identifier:   ED:59:27:7A:6A:91:E1:C5:DC:F7:50:17:33:3F:AB:E5:D6:CA:E6:D0
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B38218D7B9819DAF774B48380
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     207939
IP address blocks:        2602:fd92:ce0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:8d:7b:98:19:da:f7:74:b4:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=4345c36e-1ba7-41c1-b481-e2a0273fe4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:f6:3f:ce:c1:bf:16:0f:5e:d7:9e:53:3f:
                    d9:a0:75:e7:e7:1e:62:d7:10:da:99:4a:42:c6:e7:
                    a1:6b:c3:ba:15:6f:21:61:6c:07:64:44:b2:cb:7a:
                    96:35:d5:58:90:43:bf:b3:96:b7:48:9e:c5:b2:4a:
                    bc:23:6d:b9:1c:ff:9d:43:d0:55:79:ef:2d:8f:85:
                    34:49:bf:b3:82:6f:64:e7:f4:18:cf:03:d7:4d:01:
                    01:f1:2c:09:ef:0e:c6:1e:96:40:2d:9a:b1:1b:84:
                    be:0f:30:5e:a1:53:9c:73:94:0b:9d:0e:e8:57:0a:
                    91:8f:37:2c:5e:49:2c:d8:0d:c6:c5:dd:0f:b3:ba:
                    12:4d:4e:21:3f:a9:6a:68:3c:ad:b0:f9:04:9b:1d:
                    f1:3b:b8:a9:2f:c4:4d:ac:e1:97:85:4f:93:b1:5e:
                    ff:69:fd:e0:c7:f3:34:f2:c9:9c:d2:9f:d3:fc:e8:
                    c0:30:f8:67:ec:cf:cc:76:5d:3b:c1:61:1a:49:4d:
                    de:d7:e0:37:f2:e4:5d:d7:93:eb:03:26:fa:30:6c:
                    6a:27:2f:c4:ea:da:3c:f7:54:53:b9:cb:cf:32:17:
                    40:13:8c:40:7f:b7:aa:0e:d9:35:78:b0:fb:e3:b7:
                    0c:c5:ed:44:d4:df:aa:16:57:55:34:46:71:24:b6:
                    de:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:27:7A:6A:91:E1:C5:DC:F7:50:17:33:3F:AB:E5:D6:CA:E6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/aef94748-7b48-37ec-8326-7a31f7a87ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:ce0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8a:28:0c:5d:d1:b1:a0:ce:2f:3b:8a:3f:52:dc:5b:ba:2b:
         b6:bb:58:b0:5e:ba:cc:d3:c1:10:5e:27:03:26:63:9f:b9:77:
         18:26:c2:f8:f5:a0:c8:70:ed:8a:34:63:9c:97:a7:70:8d:0b:
         f5:c6:db:1e:db:0e:f8:50:0d:dd:b9:fc:5c:80:ec:36:83:e5:
         0c:99:75:08:ce:7e:43:2a:af:d0:d8:8a:2c:23:54:c5:d1:70:
         55:16:e5:57:d0:09:54:26:83:ff:75:bf:29:e2:f8:7b:47:a0:
         7f:15:d5:3d:d2:19:6c:34:3d:10:3d:51:88:6b:d9:ed:46:c8:
         54:fd:36:9c:40:eb:5c:e2:9d:85:cb:dc:f7:5d:d1:b0:29:a8:
         64:14:d7:94:bd:4f:1e:76:2c:8a:8d:43:e5:5e:55:36:77:27:
         8f:b2:b4:52:b0:86:b1:82:e7:c8:b8:a3:72:47:ef:74:0d:b4:
         f8:01:75:a5:8d:c0:dd:63:20:04:f1:6d:18:3d:be:69:97:d7:
         c3:bd:d3:84:36:21:01:b1:ac:a3:7b:f8:7b:47:9e:8a:ad:0e:
         f0:fa:be:94:28:dc:83:60:2a:6a:e9:dc:2c:95:f5:10:c1:c9:
         e1:99:fb:8b:b5:eb:4f:73:a2:e5:08:e1:60:8a:9d:5c:d8:14:
         f4:1b:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:36 2025 by rpki-client