Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa
File:                     8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa (raw, json)
Hash identifier:          6yfKeFZlSgEwyxBz5BO+E4O866D33nncVlOixvaocfI=
Subject key identifier:   AF:EC:DE:C1:BC:7F:17:49:CE:36:B7:3C:8F:66:4E:A4:29:28:17:03
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F4328584B99D77E9D6177727466DA83C0
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     398898
IP address blocks:        2602:808:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7e:9d:61:77:72:74:66:da:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=c806c2c1-cb5c-45ce-a55e-1dcda08032c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:69:ed:7f:24:4c:9d:b9:69:95:0e:1d:63:85:
                    b1:7e:a4:e6:f3:a7:85:85:69:7b:2b:df:3a:4d:fb:
                    53:c4:44:d0:d8:92:06:76:4b:31:4f:1c:b2:fb:f5:
                    74:af:13:ed:81:84:2d:e6:eb:0b:7c:e3:25:98:a2:
                    71:3c:c6:fe:1f:15:96:25:71:19:8b:02:e2:1a:df:
                    3d:e5:ed:78:69:5e:f9:d3:8a:d7:26:40:5c:83:21:
                    fb:b5:99:6c:4c:74:f5:61:da:7d:5e:cd:85:72:4d:
                    0d:91:97:17:82:86:85:e8:a0:b1:cb:5d:e1:34:77:
                    af:5e:6f:d7:33:d7:77:d5:d2:17:69:ce:65:0e:50:
                    cf:a8:a2:51:77:ad:c9:fb:c7:2b:f5:35:59:73:8a:
                    d6:d3:de:cb:ab:80:2b:74:0a:ec:64:e8:d2:85:72:
                    76:e2:43:6f:1a:1c:97:b1:15:cd:a3:c2:4d:88:09:
                    64:da:36:52:4c:a6:3b:e7:67:b5:e1:c2:9e:11:f2:
                    aa:7c:9a:75:ae:7e:fb:5a:f7:87:55:b5:7e:6c:b8:
                    b6:da:18:90:6f:02:8e:c5:6a:7a:26:ba:6e:d3:af:
                    3e:66:02:14:b0:70:25:80:ca:4c:12:d6:2c:7f:ed:
                    f2:f4:4a:20:8d:d8:95:0d:bd:e5:52:a4:1b:73:01:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:DE:C1:BC:7F:17:49:CE:36:B7:3C:8F:66:4E:A4:29:28:17:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/8e66eed9-f7a6-3bbf-81c8-7025f99f277b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f0:d1:d9:ce:c6:58:94:fa:ad:ee:43:e3:d7:69:18:fa:aa:
         2c:87:16:20:7c:fe:0b:3e:0f:33:92:7c:6f:de:ff:ce:2f:85:
         68:23:fc:f2:55:fe:c7:5e:b6:9d:b1:fe:a3:65:84:fa:4c:38:
         52:90:84:85:16:9a:af:83:d2:4f:13:2c:67:ff:ae:b4:38:91:
         63:27:51:e9:41:95:24:f7:7a:60:1e:5e:59:2f:9b:78:7d:10:
         a1:80:80:93:fa:d1:bd:39:cd:7a:66:e5:3b:cc:19:c2:79:e1:
         23:ad:b1:91:4c:5f:66:02:fb:16:77:e1:9b:16:76:74:fd:f4:
         70:49:78:b4:40:12:82:6b:5a:0e:84:c3:77:13:15:90:0f:e1:
         0e:0f:b2:09:09:16:ad:ec:25:74:10:c2:78:2a:e2:ef:2e:c3:
         e8:b2:56:a9:2d:7f:b3:d4:dc:b0:40:40:3e:83:17:5e:7b:c6:
         9c:c7:8d:de:38:d2:8a:4d:3f:02:03:0d:df:39:f6:ae:0d:a3:
         b6:bd:bb:01:8d:44:00:71:a2:6b:b7:e2:df:11:d4:38:23:83:
         ac:ec:3e:49:03:02:5a:cc:85:93:50:6c:54:99:05:0c:27:b8:
         d9:15:b1:94:8a:85:80:0f:0b:6b:24:f2:a4:1c:af:90:07:de:
         f1:2a:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:42:31 2025 by rpki-client