Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa
File:                     430535d4-9848-38bc-a418-b62ccffe157f.roa (raw, json)
Hash identifier:          njsmtL7IWUXcSO6PjzaDkF26zJpJv5E5Pb6ATfzFxVA=
Subject key identifier:   F1:77:9C:AD:90:F9:B6:2D:85:44:C8:0C:5B:73:AC:71:02:1F:FE:33
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F4328584B328C3ED0E22BE8EBD2CC3080
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     25737
IP address blocks:        2602:fa1f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3e:d0:e2:2b:e8:eb:d2:cc:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=df6b73a8-872d-4cf5-b263-7fa5591c7db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:77:b9:e6:ab:a4:65:32:06:0c:bb:59:87:
                    6a:5e:d3:75:6c:00:6e:98:70:c9:63:d5:88:db:80:
                    38:b1:a3:b5:b6:cd:94:6e:a3:2f:65:06:28:02:e5:
                    5d:6c:3c:ff:d0:e7:dd:2c:b3:e4:8d:70:2b:65:bd:
                    d2:4b:ca:bf:9e:6c:cf:56:79:3c:c4:b6:2e:0a:73:
                    81:29:8e:b8:79:fa:01:2f:6e:62:2e:ce:51:c9:a8:
                    ef:c3:68:51:1b:f0:de:c6:22:f2:36:7f:db:76:7e:
                    59:73:f3:e5:9a:88:d1:4e:fe:e2:27:5b:e5:05:ea:
                    1d:5c:c7:d7:ba:d9:71:d1:6d:45:50:45:e5:7b:66:
                    c1:7a:cc:ab:ee:f8:3e:ed:bc:ba:22:cc:7f:f0:d4:
                    55:10:a2:c2:16:0e:3e:24:cc:84:84:19:9b:c4:79:
                    7a:39:e3:b5:c8:e4:d3:2d:f5:8d:3d:d3:c3:89:21:
                    3a:fa:34:c6:90:cf:5d:d0:0f:4d:6c:e0:e9:18:1f:
                    af:d8:17:df:31:d7:d6:16:b6:78:f9:1e:c7:ec:ee:
                    61:fe:c6:2f:a3:bc:c2:b3:13:af:6b:16:30:5e:83:
                    17:88:3e:88:43:ac:6f:b2:a1:83:8b:b2:ba:5d:12:
                    ed:d7:3b:a1:ab:88:9a:a1:6b:d3:83:25:83:e3:d0:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:77:9C:AD:90:F9:B6:2D:85:44:C8:0C:5B:73:AC:71:02:1F:FE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/430535d4-9848-38bc-a418-b62ccffe157f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:98:4f:98:68:a7:c9:2d:e4:a1:3f:25:36:e1:8b:27:ff:82:
         04:78:f6:0a:9b:2f:bc:c8:f1:59:32:cd:c3:16:5a:02:f4:24:
         dc:c1:4b:c0:62:91:8c:1b:1d:98:63:9d:54:21:e4:35:76:4c:
         cc:d2:13:77:1b:30:3b:55:75:da:0a:2e:fc:fd:5a:14:99:c1:
         ba:2c:01:c7:8e:41:00:55:4c:2d:91:37:99:75:b7:56:ea:29:
         7b:6c:20:5f:af:df:a5:37:51:23:d7:99:93:2c:fd:67:82:72:
         e3:b7:0a:ba:80:5f:ea:d1:02:bf:4d:20:63:92:b7:46:65:11:
         a6:fb:74:6e:b1:b2:ac:4f:dc:8d:78:9b:d8:9a:e9:35:f2:d0:
         e0:73:31:37:1f:53:16:4f:fe:9a:e3:e9:2e:2c:e4:d1:67:4e:
         33:ae:3b:aa:b8:16:4f:55:1c:bc:21:de:34:24:d2:79:5f:68:
         9b:c4:7f:6e:80:23:72:ba:3a:d4:ac:15:1b:fe:3e:da:b4:7c:
         05:40:72:85:09:db:27:db:6d:ce:03:b7:8d:85:17:b2:7a:ad:
         6a:48:9f:66:cb:3d:07:a8:76:eb:3b:01:5b:f1:73:72:cc:57:
         d0:ee:05:d3:82:1a:d5:2b:18:2c:c3:9a:00:7c:3a:bd:3a:74:
         1d:67:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:09 2025 by rpki-client