Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
File:                     a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa (raw, json)
Hash identifier:          0SAmykswvb4wvrhuYCyfQjSOMAjQ8eZdlxlRIQg84Rg=
Subject key identifier:   E8:40:3E:37:65:01:5E:0A:37:52:CA:A8:95:3F:22:7C:C2:7C:B5:E9
Certificate issuer:       /CN=f838c026-61f9-443d-b867-26f60a99d561
Certificate serial:       010D0C9F4328584B6BC75D264E7C993C9099AF00
Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     30205
IP address blocks:        2602:f9c1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5d:26:4e:7c:99:3c:90:99:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=f6e5f361-2a2a-4846-a092-6e58d2aebdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:66:96:42:72:e5:5b:8a:22:82:28:5a:ca:
                    8a:41:4c:64:0f:19:d5:4e:8c:e6:de:3d:7c:62:68:
                    e0:80:a0:6e:c2:d8:62:ba:f7:71:9a:8d:68:3e:c4:
                    0b:3c:58:81:26:ca:57:57:f9:7d:f4:ed:a6:c1:1d:
                    02:4e:24:b6:62:13:96:54:97:49:78:8c:cb:b2:dd:
                    01:40:e3:4d:5f:0d:92:59:a2:89:78:46:6f:d3:63:
                    71:df:f5:43:ce:fa:48:80:82:05:fe:1b:08:40:d6:
                    b8:ce:8e:d4:78:33:19:78:3f:bc:e2:da:c9:9e:b6:
                    24:3b:3e:d1:d7:72:21:1a:14:e2:63:aa:61:bf:52:
                    03:f0:c5:ef:ee:b4:73:0e:29:67:7d:ed:f6:62:3f:
                    2e:90:5e:0c:67:ac:c8:6f:ec:63:5a:ff:c9:84:ec:
                    ab:15:32:dc:91:f9:f3:91:d2:fd:06:40:03:49:99:
                    fc:5b:92:9e:c1:b0:7a:2e:48:23:a9:d1:82:c0:23:
                    88:c5:8a:27:39:8c:7c:77:2e:7b:79:39:e2:f0:9d:
                    1c:37:f5:0e:33:5a:bf:64:5a:51:f9:40:a7:9e:ed:
                    ff:77:a6:77:51:e5:ba:60:fc:20:e3:05:b4:e7:e2:
                    e2:13:6f:1d:63:9e:07:55:99:45:c4:48:28:c1:c6:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:3E:37:65:01:5E:0A:37:52:CA:A8:95:3F:22:7C:C2:7C:B5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:97:e4:aa:ff:00:aa:07:de:91:0f:89:7e:f6:3d:fa:c4:98:
         bf:f1:a6:82:8a:88:59:88:4e:cb:f9:3a:8c:6b:22:01:fb:02:
         50:bf:70:80:e6:1a:c2:bd:8d:f8:d9:82:9f:2a:a3:6f:02:b1:
         9d:fb:b8:32:ed:41:e4:1e:0b:da:a7:45:e0:72:e4:12:5d:6e:
         46:10:ed:56:c5:31:3d:e8:38:0d:30:db:1c:f6:a8:85:46:39:
         15:fb:34:a7:e0:99:a2:18:b4:ce:08:be:dc:a9:68:fa:b8:f2:
         27:cf:4b:2b:7f:84:5b:ee:02:6c:b1:7d:3b:eb:de:f9:ba:30:
         44:39:20:8c:62:06:81:24:f2:ee:27:18:aa:dc:e7:4c:44:bc:
         c4:74:14:38:0d:fa:70:5c:65:76:60:81:e9:5c:32:a2:0d:0f:
         94:05:a2:9d:15:1d:9d:4f:3a:36:73:64:db:53:0d:bd:87:98:
         2c:5d:5d:1b:49:6f:5a:97:fb:a2:04:7e:2e:72:66:73:db:eb:
         2b:53:ec:29:8f:b9:40:08:bf:69:14:8f:c4:d2:f5:d0:36:7d:
         2c:b6:86:82:33:d3:8b:db:ca:18:da:19:38:9e:dc:e1:10:fe:
         71:4f:00:ba:b9:35:4f:90:99:c1:c2:18:6f:20:83:9f:cf:38:
         12:be:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:29:55 2025 by rpki-client