Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa
File:                     068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa (raw, json)
Hash identifier:          VNveQy7ds3ftYvL00Bml9qsmjOG80FS57cegiFcOfa8=
Subject key identifier:   CC:75:BA:83:D7:65:B2:E9:1C:0D:FF:1E:29:DF:AE:B6:B5:3F:7C:72
Certificate issuer:       /CN=f2560405-675d-4c58-8230-db678dbdf9bb
Certificate serial:       010D0C9F4328584B153C2820CC264D97B46B2A80
Authority key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:f6f9::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:28:20:cc:26:4d:97:b4:6b:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2560405-675d-4c58-8230-db678dbdf9bb
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=220cd81f-bcb1-40ef-9c93-bf9e96bfb6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:4b:a6:14:c8:c3:b6:d8:e7:d5:43:cf:65:
                    a4:51:05:55:14:d5:34:4e:7a:5f:f1:e8:6f:07:29:
                    f0:f6:1c:83:77:65:bf:e4:4c:89:0b:b3:e6:ec:93:
                    59:dd:d9:30:0a:10:88:54:21:e8:05:c8:5c:a6:e6:
                    af:b6:8e:d4:33:0e:8a:54:fd:c8:28:27:77:71:81:
                    d4:28:65:80:84:f3:bc:3c:a8:18:85:00:72:3c:fd:
                    b3:db:c0:4d:07:28:1a:02:17:c3:bf:53:96:26:84:
                    12:f5:22:12:3a:fa:bf:5f:44:7d:47:41:ee:af:1b:
                    c9:6e:8e:6b:69:be:75:84:7d:a7:66:30:40:6b:d7:
                    e4:4d:58:4b:6e:fb:cc:61:ff:ed:6b:b0:7b:f2:ef:
                    9f:88:e6:9e:0b:4c:34:18:e5:cd:cc:d4:bd:10:0a:
                    7a:46:32:e5:3d:da:d6:09:4d:f0:e0:1b:d5:86:73:
                    fb:a1:f5:9f:84:57:f8:71:37:1e:73:63:67:66:f3:
                    f3:90:9b:f1:c0:07:a2:c3:2c:d9:6c:39:1a:cb:3c:
                    0c:93:6f:2d:b4:8e:98:09:a7:4e:7f:1c:50:bc:9f:
                    a6:9f:68:ff:80:d4:93:8f:4b:dc:01:74:27:82:3a:
                    c8:cc:ff:82:4f:2c:b5:db:3c:51:5f:b2:74:dc:86:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:75:BA:83:D7:65:B2:E9:1C:0D:FF:1E:29:DF:AE:B6:B5:3F:7C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/068d9fcf-db80-3707-a11a-f0b0e66ba93b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f9::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:07:99:6e:eb:3a:8b:62:a6:25:b7:f9:58:a4:69:0e:63:c5:
         bb:af:d4:35:2a:81:5f:91:46:06:c5:18:92:8a:b1:a2:04:f8:
         c5:5c:26:f1:1c:22:f6:65:64:8c:91:27:1e:6c:46:c3:04:ef:
         ea:33:1f:86:08:7b:73:bb:a2:88:4d:fd:81:10:b5:e4:0a:4c:
         8b:61:ee:a4:c1:73:e5:94:b4:8d:64:5b:82:66:32:14:a8:05:
         6e:8f:98:c4:b9:50:67:b0:79:32:87:4b:e2:ef:3d:ac:03:c7:
         06:c7:94:d0:3f:16:63:07:b2:ed:3a:52:b0:2c:cb:7c:5b:09:
         c4:e6:df:bb:f7:91:63:63:3e:d5:95:de:45:46:cd:3a:50:5e:
         c2:51:70:30:8e:10:57:b6:52:18:5a:b8:ae:b8:99:a7:6c:dd:
         51:ba:e2:6a:ea:86:e1:ce:04:70:44:0e:b3:ba:ca:25:97:44:
         b7:20:cb:83:b1:a1:07:df:57:bd:b8:69:9a:d7:7e:d6:5a:cd:
         87:15:27:20:4d:d5:82:aa:c4:13:3f:fe:a5:64:a9:79:39:d3:
         84:26:0e:6f:ec:a3:93:c5:36:f9:f1:f0:ab:96:00:7f:f2:62:
         15:3c:61:92:33:d7:59:aa:25:6f:69:5c:d0:66:7c:c9:c4:c7:
         fb:98:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:54 2025 by rpki-client