Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
File:                     8f5ea83f-dd82-349a-b701-754f1bf41217.roa (raw, json)
Hash identifier:          6RzpcpP4GcOWxq8CABkhezs1rKsjiF3KXc/1BpK53qg=
Subject key identifier:   A1:12:8C:94:37:63:3B:A0:01:24:F1:A7:30:55:C2:2F:CA:F8:8E:FA
Certificate issuer:       /CN=6ad8d02c-4049-4deb-a840-4229a7010c02
Certificate serial:       010D0C9F4328584B1AD194BB2F033E21A83C3170
Authority key identifier: 74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     395544
IP address blocks:        2602:fb14::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:94:bb:2f:03:3e:21:a8:3c:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad8d02c-4049-4deb-a840-4229a7010c02
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=3edc3ee8-2132-49d5-bd16-45054bf6d3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:09:43:a1:5c:53:a0:7b:49:91:fc:d2:64:
                    7c:95:dc:81:a9:73:f7:7f:74:d9:15:08:48:d1:0c:
                    fa:07:0c:46:b2:61:6e:4c:13:64:65:ad:e7:e3:bc:
                    ee:57:9c:e9:2b:e9:a6:09:ae:f2:ae:1e:1e:a8:00:
                    a7:e4:db:be:02:35:91:de:b2:18:2b:df:f5:a3:f0:
                    8b:6d:90:d9:9d:a4:3f:83:4c:ab:af:d4:b7:b6:0a:
                    a5:8f:dc:da:a4:f6:c6:b1:51:20:40:cc:55:31:21:
                    91:46:c8:04:d9:e5:e3:91:51:64:5a:9a:0b:36:c5:
                    6e:76:be:dd:83:39:5d:3d:a6:38:86:3c:d1:ad:5d:
                    60:5d:ca:eb:01:9f:c0:ac:c6:49:f6:fa:f3:55:41:
                    11:c7:57:bb:d7:98:84:10:28:e1:f1:4d:70:48:eb:
                    60:14:71:67:7e:e7:0c:aa:b5:f3:05:25:de:5d:23:
                    42:69:75:12:9c:e4:b2:60:a6:06:3d:ad:82:2b:ba:
                    12:fc:88:99:ae:46:74:e1:74:38:a1:eb:da:7b:ae:
                    00:b4:d5:97:3b:ba:68:e1:cc:d5:be:b3:a6:cc:f9:
                    17:c5:a0:16:cc:7a:c9:14:51:68:ef:9a:c2:5d:c5:
                    a3:80:c1:c2:c1:d4:69:b4:20:e5:25:83:3c:dd:66:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:8C:94:37:63:3B:A0:01:24:F1:A7:30:55:C2:2F:CA:F8:8E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl

            X509v3 Authority Key Identifier:
                keyid:74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb14::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:50:d8:25:6a:08:2b:6f:61:6b:d2:6e:8a:7f:e8:94:e7:2a:
         0b:7e:43:f9:72:46:72:90:3d:5f:3b:9e:01:8a:08:c3:bf:ee:
         de:c1:5d:ec:7f:25:f9:86:a8:1e:24:f1:aa:a5:66:f0:64:5f:
         56:02:68:3b:04:d4:43:b6:d7:87:90:65:55:77:98:16:7c:83:
         a8:b1:62:93:2b:08:29:81:98:83:fc:de:c3:38:1f:49:c8:1e:
         81:86:79:5c:62:23:95:52:2d:6d:2a:6b:4f:1a:83:7a:c0:22:
         42:ca:77:1d:91:a5:17:19:50:99:04:41:61:de:95:89:80:10:
         d2:a1:89:68:34:75:f1:ef:cb:66:75:b5:41:94:5b:4e:71:c1:
         b0:d1:a3:21:80:8a:fc:16:4e:d9:e1:37:89:a9:c6:26:b0:79:
         32:3d:42:ad:90:dd:2b:09:6b:5c:7f:a7:b3:a5:74:d8:f3:eb:
         51:7a:37:5e:8f:45:5f:ff:bd:41:d1:c6:f6:2c:d5:22:f0:66:
         a6:d3:0b:41:60:8d:22:a9:3e:4c:f0:84:97:1b:27:69:67:d5:
         7f:93:46:de:92:db:38:6a:e4:3d:20:69:e5:66:59:1e:42:5c:
         16:ba:5d:5d:05:fd:e3:62:56:36:2f:e4:15:7d:9f:56:c0:ad:
         0e:e6:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:24:54 2025 by rpki-client