Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6bc295d4-c36b-3947-82a3-cb49138dfab2.roa
File:                     6bc295d4-c36b-3947-82a3-cb49138dfab2.roa (raw, json)
Hash identifier:          2EYL3/ul1EHbAOwsXLRI2FnkankYKXy/hLIc3HRM4AA=
Subject key identifier:   56:99:EA:9E:F9:4E:B3:42:EC:4C:C6:6F:64:7E:D9:5D:74:29:0B:A9
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584BA7CCF0540BAFFB198B129100
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6bc295d4-c36b-3947-82a3-cb49138dfab2.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     149513
IP address blocks:        2602:fa33:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f0:54:0b:af:fb:19:8b:12:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=852e9537-e8e5-427d-b43a-157763ba5cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ed:15:20:82:e3:02:5c:e4:a0:44:d4:8e:25:
                    cd:9c:18:e8:32:8e:83:e9:da:78:dd:2b:c6:85:86:
                    7e:22:aa:0b:5f:d3:e4:5b:34:66:0e:24:fc:09:a9:
                    68:ac:5d:b2:23:e7:03:95:45:53:e9:8c:d3:99:11:
                    01:7c:58:8b:13:83:33:c2:66:9c:68:12:97:ad:07:
                    05:ad:69:36:49:f0:c9:7b:1f:d5:2d:10:31:4e:b8:
                    88:4e:2e:8c:79:ae:36:8a:a7:d7:b5:3c:e5:50:c1:
                    19:ae:b6:5b:9a:20:b8:68:7e:fa:f8:2f:15:dd:61:
                    1d:26:d8:b8:ff:1b:a3:c3:3c:b7:59:55:3a:e9:12:
                    25:df:55:a1:09:8b:43:5a:04:4b:3e:87:48:39:d7:
                    ec:97:82:a1:ea:ea:f7:99:a5:a8:6e:e5:b5:fd:e1:
                    ca:93:63:56:0c:9c:2c:d3:ce:53:ea:68:ed:f3:f2:
                    15:1b:4f:2a:91:1a:ab:93:66:66:e9:4d:80:d4:67:
                    d2:d3:1f:bb:18:d6:ef:e5:87:aa:d8:1a:43:b1:25:
                    2e:d7:a3:81:dc:64:3c:73:19:aa:65:d4:d2:e0:8d:
                    8e:9a:b9:27:aa:49:ec:8d:73:05:ad:08:7a:7a:2b:
                    30:6a:5e:5e:24:8b:33:4d:a3:53:49:3e:c3:14:cd:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:99:EA:9E:F9:4E:B3:42:EC:4C:C6:6F:64:7E:D9:5D:74:29:0B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6bc295d4-c36b-3947-82a3-cb49138dfab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:3d:fe:7e:24:91:40:85:48:36:90:a0:37:e9:46:1d:f3:
         f4:fc:c3:da:e4:d4:84:5c:6d:7c:c6:1f:9b:17:ae:de:8e:8e:
         4b:70:c7:3b:df:a0:d9:8a:a4:fd:7f:01:de:63:8d:57:94:cd:
         47:64:c5:ac:05:d8:f5:2f:31:74:4e:22:fc:0b:f5:84:e3:b3:
         c3:92:7f:af:da:13:8c:fc:ea:3e:e7:7d:f2:76:c7:d5:c1:e2:
         aa:e8:e7:e4:14:60:65:40:eb:98:93:75:b3:7b:ae:37:a4:00:
         01:c5:46:74:16:05:be:6f:ad:4a:d0:08:c4:52:68:98:30:f3:
         06:be:ba:2d:fc:96:06:d6:b9:5a:b1:44:d1:89:7b:44:d8:f5:
         69:90:d6:3f:61:cf:a8:f7:5c:f1:48:c2:61:71:35:4d:f3:19:
         67:88:53:63:e6:2a:92:c3:a8:05:91:3f:5e:24:6e:e7:94:c6:
         10:a5:72:87:86:c6:4e:a5:3d:42:3e:ea:ac:f6:fa:61:17:89:
         0e:c7:f2:94:ed:f8:c7:66:0a:59:bf:87:d1:7e:32:b3:c5:1e:
         25:fa:41:51:5a:dd:1a:b8:b1:ef:4a:21:49:97:f6:dd:72:3e:
         7b:b1:f0:aa:60:a9:37:48:69:d6:76:89:44:f6:21:a4:3c:0b:
         b2:f0:27:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:17:18 2025 by rpki-client