Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa
File:                     71e66a14-ce15-383b-b41d-9b4cab79a487.roa (raw, json)
Hash identifier:          pRJZdulmnFPZexwbsD8K2/0DTU6itCt42izmW7/XqAs=
Subject key identifier:   C0:E2:A6:FE:81:B3:4A:D8:CB:8C:87:EB:D0:C6:E5:20:64:B6:A9:5A
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F4328584B1806D4A8C6DFA9611E3D9800
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396416
IP address blocks:        2602:fb78:80::/48 maxlen: 48
                          2602:fb78:a0::/48 maxlen: 48
                          2602:fb78:b0::/48 maxlen: 48
                          2602:fb78:c0::/48 maxlen: 48
                          2602:fb78:d0::/48 maxlen: 48
                          2602:fb78:e0::/48 maxlen: 48
                          2602:fb78:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d4:a8:c6:df:a9:61:1e:3d:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=33f83791-3626-4c1c-9290-5639d30f4bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:ef:88:6f:ce:df:fa:4c:5d:14:60:20:d5:
                    86:07:6a:5b:86:ce:1f:78:14:fc:15:8b:4d:29:82:
                    b0:4f:b0:10:c4:7a:9a:9d:8f:13:8b:0e:1b:49:c5:
                    37:6b:a3:af:75:56:56:45:57:ff:d5:0a:38:7a:0d:
                    32:2f:e8:0d:4f:34:7a:1c:53:10:47:36:18:b8:f9:
                    9c:30:a9:ae:06:bf:d9:87:0d:1b:e2:ea:c5:02:33:
                    a0:34:30:01:8e:43:a2:80:f3:ff:db:f1:2b:56:d4:
                    4e:ce:ff:d5:93:de:7f:3b:02:38:cd:5a:68:33:34:
                    56:15:4a:27:be:94:5c:b6:5e:d3:c0:79:0e:cd:ad:
                    39:98:40:65:5a:b3:06:d4:6e:f1:bd:f4:5e:5c:ca:
                    69:4e:7a:a7:8e:7f:89:d1:7d:0c:82:32:b8:f3:ae:
                    2a:05:ca:d5:c4:64:b4:27:b4:35:e1:da:8e:01:2e:
                    52:4d:da:cb:5b:c4:e4:93:79:96:5b:30:e0:90:02:
                    45:8f:b2:a7:6a:3f:b7:1d:1b:9b:dd:62:b7:e3:bb:
                    08:42:a2:cc:86:ea:f2:2a:c5:32:57:11:fa:19:6f:
                    31:7f:d4:ac:74:eb:84:31:02:95:13:8b:ea:fd:70:
                    64:80:07:21:fe:22:7c:0c:8a:90:b0:0d:ad:c8:6f:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E2:A6:FE:81:B3:4A:D8:CB:8C:87:EB:D0:C6:E5:20:64:B6:A9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/71e66a14-ce15-383b-b41d-9b4cab79a487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb78:80::/48
                  2602:fb78:a0::/48
                  2602:fb78:b0::/48
                  2602:fb78:c0::/48
                  2602:fb78:d0::/48
                  2602:fb78:e0::/48
                  2602:fb78:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e7:62:2e:08:be:29:a7:29:76:19:db:67:dd:53:40:51:1e:
         06:c8:47:68:9c:63:ce:86:13:51:86:ac:ca:9f:8f:a7:08:dd:
         da:b3:88:8f:75:d1:89:55:58:38:d5:66:9b:d7:84:84:30:f5:
         f4:0f:b1:6b:15:1b:08:9f:ea:45:04:ed:d3:46:70:9b:d3:84:
         57:41:7a:9d:11:e4:60:a2:7b:63:2b:82:bf:24:11:44:78:34:
         cf:ba:09:4d:86:1f:48:41:ca:f8:31:14:71:86:78:b5:f9:6a:
         27:95:04:45:8f:57:bb:00:dd:07:6d:d9:85:81:cc:b6:72:ae:
         4c:54:eb:22:4c:9b:e0:c6:32:26:bd:81:5d:ed:e8:2f:05:e1:
         db:58:4e:d0:1c:95:6b:31:21:b4:2e:14:6e:27:da:f7:4f:a6:
         33:23:44:91:e7:8e:3d:1c:b8:5f:93:82:9c:3e:98:73:5a:b9:
         ae:7b:fb:13:a2:91:78:5d:bd:6c:89:57:69:36:d1:3e:07:93:
         5c:9f:a0:c4:5d:2a:64:b7:89:23:43:9f:cf:21:13:b3:8a:fe:
         3d:90:34:a1:ea:33:3b:ad:d8:3d:d8:44:d0:5c:86:fd:03:2b:
         21:57:a4:87:cf:5d:1d:86:ba:c3:39:f2:07:7b:bf:12:df:ad:
         58:08:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:19 2025 by rpki-client