Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa
File:                     575aa4d8-88aa-34d0-80b3-35c82af29649.roa (raw, json)
Hash identifier:          l3MKi3jnUbfYvLIW4pP0KOEnOaWI8OO6q3/fkuXga8M=
Subject key identifier:   4C:B3:10:9F:24:3A:D7:FC:E4:14:A3:1C:69:CE:01:C6:1E:BC:03:68
Certificate issuer:       /CN=9b2dd4d6-06da-4602-9071-aee92968f31a
Certificate serial:       010D0C9F4328584B36BC57D8929B1822F1A08180
Authority key identifier: 86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     400596
IP address blocks:        2602:f758::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:57:d8:92:9b:18:22:f1:a0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dd4d6-06da-4602-9071-aee92968f31a
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=10b7276b-7f55-4f0a-9999-7d9d191ceef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:b2:51:12:ef:fc:0b:c0:3e:dd:f3:17:29:
                    8e:03:ae:4c:55:d8:02:08:64:d9:7b:5c:d7:07:0c:
                    22:99:01:a8:75:cf:57:c0:ff:b1:f0:42:0b:99:bf:
                    1e:5d:e4:8a:da:83:6b:f9:38:84:60:e8:bb:e0:79:
                    de:72:2f:6f:a6:64:75:af:cc:52:55:79:9b:e5:40:
                    04:af:ff:f3:ad:7f:21:1d:c5:1e:36:66:b2:4c:8b:
                    9f:63:18:30:91:3e:9b:a8:af:83:0b:a8:35:d9:53:
                    ce:87:d9:4e:16:6c:e1:e3:23:7b:fe:cf:1e:cd:c9:
                    1b:6c:67:51:3f:15:ff:2c:40:8a:fe:15:7c:95:ff:
                    8c:97:35:ac:2a:2c:5e:c4:d5:59:4e:a3:87:50:23:
                    b8:ed:79:22:37:50:f0:11:88:5d:48:cf:f0:e0:ee:
                    fb:34:a4:90:29:e8:7c:d0:44:b6:68:5b:74:81:69:
                    60:34:5e:38:fb:70:c3:5b:61:e2:a6:6b:4e:f2:16:
                    b7:36:ea:d9:56:45:ef:0f:c1:58:c1:66:5e:b3:7d:
                    b7:79:7c:85:97:f6:fa:29:0a:5a:0d:ca:61:f6:98:
                    b6:96:95:fd:1b:15:e3:d9:a2:5d:57:52:c5:00:5b:
                    ca:b5:59:df:7e:2c:08:23:1d:13:3f:23:e9:b0:c7:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:10:9F:24:3A:D7:FC:E4:14:A3:1C:69:CE:01:C6:1E:BC:03:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/575aa4d8-88aa-34d0-80b3-35c82af29649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a/9b2dd4d6-06da-4602-9071-aee92968f31a.crl

            X509v3 Authority Key Identifier:
                keyid:86:DB:48:E7:9B:A5:A8:A6:88:5A:54:D5:60:13:CD:82:74:72:89:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b2dd4d6-06da-4602-9071-aee92968f31a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f758::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:68:ea:1c:79:55:6a:0f:81:2b:b5:51:2d:59:b7:ac:ad:
         d5:a7:b9:c2:3b:88:1a:9e:8b:97:b1:5a:0f:e5:d6:e3:50:81:
         00:39:a2:05:a8:88:29:d9:17:ad:5d:7f:e8:ac:00:fa:bd:62:
         b7:e0:b8:b2:35:68:88:c4:a7:45:90:2e:68:98:0d:2c:f5:f5:
         32:7c:f9:b8:55:b1:55:44:df:9b:79:92:82:9c:eb:ae:a5:6f:
         45:4e:92:da:ea:55:6a:a2:66:fc:06:dd:10:2c:47:ae:9e:48:
         ef:fe:b9:cf:a7:b4:ca:dd:86:cc:7a:77:c6:ba:1a:72:1a:35:
         64:fd:fa:cd:11:7b:43:45:ed:17:4a:0e:8f:e7:8c:b2:35:8a:
         3a:c1:a9:be:22:63:5c:64:ea:ad:3e:91:8a:0e:ee:53:c6:91:
         01:8c:d8:3a:f0:67:a5:8f:8c:b3:67:9a:48:4c:dd:2c:eb:27:
         26:a5:ea:58:3e:d4:dd:05:6e:4f:24:79:84:f1:14:89:d0:85:
         b1:e3:44:de:f5:c0:c2:e8:6f:da:0a:37:8d:26:36:bb:0c:52:
         0d:1d:b6:6d:6e:7d:7c:e4:70:aa:43:fc:0b:32:74:c5:b3:e0:
         9e:a4:0d:d2:64:7d:59:b5:72:b8:76:d7:d6:86:b4:f3:65:0e:
         e0:de:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:27 2025 by rpki-client