Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa
File:                     df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa (raw, json)
Hash identifier:          vv7RWS+hQneYOZVe7htHRjaDGuawlnbTxxnp6r/fDtU=
Subject key identifier:   74:E8:67:A0:1D:88:18:1F:00:F7:35:D1:93:D9:A2:17:02:02:CA:CE
Certificate issuer:       /CN=2ef52563-8058-416a-a5ae-9e83b023cee1
Certificate serial:       010D0C9F4328584B715CA88AEBFBE36A7CD23800
Authority key identifier: FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     11875
IP address blocks:        2602:815:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a8:8a:eb:fb:e3:6a:7c:d2:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef52563-8058-416a-a5ae-9e83b023cee1
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=9f3fc440-948f-439d-8a03-2d63f4d0b8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:0d:a2:f0:3d:32:01:f2:7f:7c:6c:96:42:
                    e1:07:1c:14:81:9a:ce:37:be:c7:86:42:c5:66:17:
                    97:d6:8e:e3:b0:36:38:a0:dd:69:7a:d4:4c:dd:81:
                    f8:74:8d:16:8a:42:5c:f2:1e:2c:3f:83:1b:71:bb:
                    58:94:ee:cf:0a:2e:82:e0:d5:48:7f:74:00:e6:92:
                    3e:0f:d4:f6:7c:f5:8e:b6:4c:9f:97:c1:19:bd:d8:
                    fc:74:ac:37:aa:e5:21:c7:c4:e4:bd:34:6e:43:05:
                    41:62:ea:06:d3:ba:bc:64:0e:92:cf:1e:a0:59:d1:
                    7a:6b:f3:1e:e2:67:75:05:4f:32:11:e5:a3:9a:b2:
                    00:00:b1:50:60:50:5a:ab:0c:cb:0b:bf:cd:8c:67:
                    44:3c:a7:8f:ce:be:94:29:9f:9e:4a:00:da:28:c3:
                    7e:79:47:04:ec:5b:63:85:15:9c:1e:38:fc:f9:7a:
                    5e:5d:27:a3:46:8b:26:49:80:bc:f8:91:ac:d4:71:
                    a3:38:c2:10:1f:87:07:cd:ee:b0:56:b9:b6:e0:d9:
                    f2:1a:35:e7:b9:6b:7c:e9:cf:1e:c2:e6:d9:d5:48:
                    41:06:ea:aa:17:3a:91:35:e7:34:cc:02:b4:f3:bd:
                    e7:83:7e:b7:84:e8:04:6f:08:d5:30:43:49:22:c4:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E8:67:A0:1D:88:18:1F:00:F7:35:D1:93:D9:A2:17:02:02:CA:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl

            X509v3 Authority Key Identifier:
                keyid:FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:86:f2:17:45:9c:e7:b8:fb:93:8a:7a:ff:28:cd:06:7c:
         d8:9b:dd:96:37:36:6a:fc:80:c1:09:7e:11:b0:17:c1:10:e2:
         a7:87:04:0a:85:de:4c:72:37:de:94:ac:35:4f:83:79:01:e6:
         a4:4e:a7:df:40:e3:25:f8:59:e5:6b:6b:a7:ab:c1:32:53:f5:
         97:81:d1:a1:6f:8b:20:39:b6:8a:52:77:ae:0d:5e:97:cd:c3:
         04:6f:ed:d4:ff:a7:ff:e9:a8:2f:95:8e:1a:da:45:c3:fb:ee:
         51:ad:6d:4c:b6:50:e7:ad:c1:b9:54:91:fa:04:f6:d8:36:26:
         82:1a:5a:99:92:8d:38:ff:f5:64:b2:4a:9d:1b:99:bc:c4:4e:
         a6:66:59:eb:20:f3:f0:89:31:58:ce:e5:da:96:ed:17:46:7c:
         bc:5b:63:1b:f6:ce:33:41:09:6b:ea:dc:37:9b:27:1e:3f:34:
         c1:65:9c:2d:10:d3:3a:e3:aa:01:ee:33:3f:b5:b7:4b:04:24:
         4b:32:87:7d:e1:98:f2:8e:de:d0:b0:37:17:da:0e:ca:12:eb:
         13:d7:7f:1c:99:86:ac:da:21:fe:49:93:27:3f:2e:90:a2:57:
         2e:8d:4a:fb:06:ca:d1:4b:c8:8e:3b:6d:b5:a2:1c:ca:1c:98:
         44:0f:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:44:26 2025 by rpki-client