Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
File:                     ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa (raw, json)
Hash identifier:          ZbtiJvdM4ZWCEvH8Zsz0OrjtmlMJVv2Vy4loLYrLkc4=
Subject key identifier:   FB:5A:7F:42:CF:91:C2:43:05:77:1E:6B:06:B2:F7:6C:64:BA:51:8E
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B477C703F83F6B5D8B630DE80
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     39618
IP address blocks:        2602:fd92:b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:70:3f:83:f6:b5:d8:b6:30:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=fc7d85be-461f-4d81-9426-b52807ae8325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1c:b4:86:6b:76:19:06:94:f8:19:3f:bc:20:
                    46:da:9d:e4:12:af:3a:ee:c8:f1:d6:5a:b2:2c:77:
                    b2:15:1b:3b:b3:eb:44:fe:a8:85:fe:89:16:24:80:
                    22:43:7e:07:aa:26:72:09:1d:58:88:83:cb:5e:de:
                    5f:36:80:4f:f1:8d:e8:81:d9:79:a3:d6:23:31:91:
                    a6:57:2e:4a:de:56:89:14:4d:62:05:c8:20:fb:76:
                    91:af:6e:ae:63:95:84:20:04:0a:99:29:65:ff:65:
                    50:e9:56:3f:32:49:99:93:09:c5:ef:60:79:ec:12:
                    9d:44:23:ca:44:15:64:a6:b5:ed:78:34:7e:1a:65:
                    f7:33:88:b9:3b:95:d6:5b:fb:fb:56:12:68:81:75:
                    62:d0:e8:53:41:91:bd:15:7b:00:3b:ee:ba:6f:65:
                    b4:bb:ed:0c:c3:1d:02:d3:05:4c:99:84:35:d4:62:
                    0e:e7:a6:1a:b3:b3:71:76:f6:fe:d5:80:62:77:55:
                    ae:bb:f1:9c:60:18:48:35:50:43:d4:11:ce:bf:7d:
                    d1:1b:41:17:46:f3:fe:05:a6:8a:18:52:7f:6c:7a:
                    a6:00:ca:02:31:98:3e:d2:1a:e9:7e:d0:83:13:52:
                    3a:f3:dd:bf:90:e3:cd:be:5b:ff:aa:99:97:f8:d8:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:7F:42:CF:91:C2:43:05:77:1E:6B:06:B2:F7:6C:64:BA:51:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/ea8ae3ee-7a13-379c-a42e-7118ec41768e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:96:22:c0:4f:b0:bc:36:11:1d:04:06:57:93:04:49:b9:
         93:0d:88:bf:59:be:d6:ff:7f:d1:d7:69:03:5f:7b:7f:ae:d5:
         70:40:3e:54:38:cf:00:34:b9:e2:51:e7:4d:df:ec:59:88:80:
         11:68:d0:f2:a8:06:12:f1:7e:d1:b5:ac:69:91:c4:28:ca:82:
         49:aa:36:77:5b:fe:ae:e5:6e:b6:61:4a:e2:8f:c3:bf:ef:a8:
         2e:74:41:65:61:95:d4:54:1a:2d:51:49:d1:16:a6:a9:4b:83:
         8b:00:42:4d:30:8d:6c:53:00:1d:fc:ee:30:20:ec:31:a1:0d:
         f4:6d:b2:84:6b:1c:42:7c:fe:0e:da:88:0f:fa:8b:26:f9:cd:
         24:e5:98:0d:59:22:86:3a:50:e4:36:ae:68:9c:3a:a5:7f:23:
         7c:a4:7f:1d:ea:47:41:09:f9:c6:60:10:33:d9:f8:c7:65:10:
         d7:45:cd:9d:7b:4f:ae:73:6e:ff:60:80:95:91:7c:3c:3c:40:
         72:24:8e:2f:a0:fb:09:fb:e9:8f:06:24:e1:1f:0a:10:96:c6:
         2d:a3:02:1f:a8:ba:05:63:80:a1:45:d2:9e:1f:ca:7f:17:ec:
         4b:bf:f0:79:10:06:c5:08:17:e8:63:cc:e7:a7:a9:c5:77:2f:
         95:21:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:39 2025 by rpki-client