Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/77741135-75d7-3afb-b68b-c4835b419848.roa
File:                     77741135-75d7-3afb-b68b-c4835b419848.roa (raw, json)
Hash identifier:          T/qGl4C1boV6JfrSJcL8Rjil7zRN+68ZklOagEJuqAI=
Subject key identifier:   60:B4:78:DC:73:1D:0E:39:43:21:D5:7A:A8:8F:65:BE:E2:6F:DC:33
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584B2A2C3E61101C21BF45707D80
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/77741135-75d7-3afb-b68b-c4835b419848.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     23470
IP address blocks:        2602:fd09:100::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3e:61:10:1c:21:bf:45:70:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=7879f7a9-68e7-449a-a411-63b4076d7594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:a7:36:ca:af:0b:b9:79:93:65:35:67:3c:
                    50:2d:76:cd:62:64:30:3d:cf:fc:eb:3b:f2:1e:1b:
                    b9:d6:1e:37:6b:ab:c9:29:6f:c2:7c:d3:1e:cc:68:
                    9b:65:61:c1:38:12:67:40:51:24:7d:72:62:72:42:
                    f1:48:0c:68:cc:63:26:1b:04:50:58:f6:78:c9:01:
                    49:63:fb:6e:8d:2a:2c:4d:1d:d9:97:ec:7f:0a:8c:
                    c5:88:29:1a:82:0f:9e:4c:7d:9c:8a:f1:e7:bd:a3:
                    8c:61:4c:5b:fb:f2:19:4d:3f:cb:ef:74:64:af:e5:
                    10:ac:fe:a4:70:9e:d7:09:8e:9e:16:de:21:f6:4a:
                    a6:d4:e6:55:de:1d:7e:a6:0b:26:b6:ac:b0:68:2a:
                    0f:06:85:9e:4c:12:53:28:4a:b2:2f:e6:44:33:f6:
                    4c:23:f4:c5:57:fa:68:f1:bf:3d:14:51:ff:43:e7:
                    54:d0:7b:10:d7:34:62:07:46:fb:b7:ab:39:3a:05:
                    6a:54:d1:8c:18:a9:5e:bb:4e:eb:0b:63:52:b2:e8:
                    40:3b:a5:87:3d:06:ae:c0:f0:95:81:3c:db:76:dc:
                    0f:e2:20:97:f5:a0:51:8a:24:33:07:77:df:d7:dc:
                    6f:e7:cd:fa:ab:f6:87:9a:3d:ae:6b:b8:2c:25:b2:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:78:DC:73:1D:0E:39:43:21:D5:7A:A8:8F:65:BE:E2:6F:DC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/77741135-75d7-3afb-b68b-c4835b419848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd09:100::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:02:d4:69:2b:60:f0:f7:c2:2b:35:d7:1e:72:37:7a:ec:85:
         57:10:71:28:42:6d:54:1a:d8:b7:88:e8:8c:5d:b4:2a:8d:1a:
         7f:ee:b3:e7:36:4a:56:98:f5:7c:48:43:4b:76:56:74:fa:f7:
         23:6c:a8:cf:95:77:f6:56:57:69:cb:7c:48:ad:50:e4:4b:bb:
         2f:60:42:70:83:a8:06:3c:b6:c5:3f:7a:7d:00:ee:52:a0:c4:
         68:27:e8:05:2c:e2:57:fa:36:94:91:61:ce:50:9f:f7:46:28:
         23:32:ea:ca:6a:ce:b3:75:ed:a0:e4:d1:ef:fb:dd:a9:f4:32:
         90:81:4c:73:fb:60:3e:9f:6e:57:ed:4c:b3:3f:68:27:ed:7c:
         c9:b5:9e:2a:ce:ef:dd:9e:62:9e:9e:74:87:d8:b6:e8:94:b7:
         05:9e:9f:46:d2:9e:98:c1:14:18:d7:c2:9f:cb:d4:78:35:d1:
         de:a9:3b:6a:12:25:1b:6d:95:90:20:d4:af:50:2d:27:fb:be:
         b3:3d:8f:8e:a7:26:55:ed:95:69:57:55:19:5f:5b:fe:82:9e:
         09:21:fd:07:90:8b:6d:4f:96:46:7b:7a:eb:e2:e3:40:eb:11:
         09:2b:14:2e:fe:4e:62:4b:22:9e:09:e5:0a:4d:1f:b1:8d:69:
         70:85:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:06 2025 by rpki-client