Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/8b1fca62-4053-3283-b79c-2b1bfe56985d.roa
File:                     8b1fca62-4053-3283-b79c-2b1bfe56985d.roa (raw, json)
Hash identifier:          rXcAzz7Ukqwb81zbTuji/J/RpIuKm8T7Tjl6LQWrrAY=
Subject key identifier:   19:5C:78:63:4E:05:4B:8D:A4:37:FA:D9:15:7E:78:E7:E2:1F:0F:03
Certificate issuer:       /CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
Certificate serial:       010D0C9F4328584B51C0CE662BA62597857C1DC0
Authority key identifier: 15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/8b1fca62-4053-3283-b79c-2b1bfe56985d.roa
Signing time:             Fri 26 Sep 2025 05:16:39 +0000
ROA not before:           Fri 26 Sep 2025 05:16:39 +0000
ROA not after:            Thu 25 Dec 2025 06:16:39 +0000
asID:                     53544
IP address blocks:        2602:f57a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:c0:ce:66:2b:a6:25:97:85:7c:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
        Validity
            Not Before: Sep 26 05:16:39 2025 GMT
            Not After : Dec 25 06:16:39 2025 GMT
        Subject: CN=a00462c2-ab58-4d11-8ebb-de0b0cad81d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:8c:a2:00:dd:df:7c:f3:9f:28:1b:5a:48:
                    7d:ac:a4:c6:86:2c:9b:d7:5d:9b:a3:31:bc:b6:a0:
                    9c:96:ea:81:29:22:0e:8b:bb:ad:d1:cf:83:86:e2:
                    2d:51:80:45:a9:62:04:3e:a4:6a:17:63:55:57:6d:
                    2d:95:31:2d:b1:a2:db:bc:91:a1:6e:78:cd:43:de:
                    fd:34:ab:bc:53:b6:97:27:a8:9e:f8:51:79:5c:b0:
                    51:cb:7c:fe:cb:1b:dc:1a:13:0d:31:72:1e:10:f3:
                    43:99:48:b0:5c:5b:38:a8:b2:7e:1d:88:09:e1:fe:
                    23:f0:a8:0f:55:05:15:12:ef:eb:66:d5:02:bf:ec:
                    7a:2a:6d:bb:b1:af:0b:49:7d:ef:f0:62:43:b1:4c:
                    a8:0b:93:70:a6:29:56:98:9f:af:46:28:c7:bc:14:
                    cd:d6:bf:cc:bc:7e:cf:a2:f4:cf:74:00:81:c4:60:
                    fa:7a:ee:ce:d1:7b:94:e6:63:57:32:92:c1:12:c7:
                    d9:fd:ff:1c:7f:24:ef:13:95:e8:77:cb:e2:99:54:
                    ad:46:0f:88:80:cc:e9:ef:ba:4f:82:96:d0:41:27:
                    dd:83:34:02:df:1e:f2:95:80:d5:1c:b8:5d:a2:0d:
                    d7:3b:2d:76:9b:51:b8:2c:43:72:81:a3:69:24:29:
                    2d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:78:63:4E:05:4B:8D:A4:37:FA:D9:15:7E:78:E7:E2:1F:0F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/8b1fca62-4053-3283-b79c-2b1bfe56985d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f57a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:78:0f:38:4d:74:5c:53:79:f7:6b:ee:3f:c2:48:e3:5a:
         f1:63:00:27:ff:25:52:e7:db:a8:69:6b:51:38:86:dc:d6:8f:
         3f:73:50:55:81:4f:5f:22:ff:ae:80:b2:fd:ff:16:fe:85:10:
         1a:9d:f0:ee:7a:cb:92:8f:1e:a9:0a:c9:ec:43:50:9c:42:6f:
         95:a8:76:9c:e8:92:cd:ea:b8:64:73:ed:50:a3:0a:b0:a3:a2:
         71:99:fb:44:71:b2:ea:cd:5e:26:09:f9:e3:61:f6:f6:40:5b:
         ca:df:26:09:f2:9d:25:d9:38:e0:bd:91:9c:d1:f9:e7:25:5d:
         c1:9e:21:de:7d:30:99:75:68:9b:a3:d4:01:bd:32:0f:26:05:
         ae:6c:51:37:c9:57:c1:b4:fb:da:7e:00:05:9b:e0:0c:77:c2:
         30:23:b9:11:e1:ef:47:4a:ad:23:3f:77:39:0e:a0:27:5b:68:
         fc:71:60:e7:ee:8c:84:2e:e1:6d:b0:11:2d:ef:d0:b5:1a:b9:
         ef:93:0f:45:28:e3:40:92:2f:0e:36:6d:04:73:35:12:00:ee:
         85:ac:f5:a0:d1:68:35:17:19:42:7d:72:ef:56:d4:ae:93:91:
         eb:4d:96:66:94:0f:d6:a8:29:25:42:53:99:e0:4c:e8:93:30:
         6d:1d:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 20:59:52 2025 by rpki-client