Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d26ed126-d68d-3ef8-86ec-64e5a32fbe2e.roa
File:                     d26ed126-d68d-3ef8-86ec-64e5a32fbe2e.roa (raw, json)
Hash identifier:          1358vsUEOSKd8EqlFVWATHJK2RwpybbCIvnwqaHEqpg=
Subject key identifier:   BA:29:DF:26:EE:87:00:61:30:F4:8D:4B:3B:4D:33:3D:FB:5D:5C:09
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584BD71EB591D95F412D5C4D2480
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d26ed126-d68d-3ef8-86ec-64e5a32fbe2e.roa
Signing time:             Wed 12 Nov 2025 23:48:22 +0000
ROA not before:           Wed 12 Nov 2025 23:48:22 +0000
ROA not after:            Tue 10 Feb 2026 23:48:22 +0000
asID:                     33363
IP address blocks:        2602:107:7200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d7:1e:b5:91:d9:5f:41:2d:5c:4d:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 12 23:48:22 2025 GMT
            Not After : Feb 10 23:48:22 2026 GMT
        Subject: CN=784bce8a-72d4-4ae3-8995-692caad14085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:29:c3:7f:b5:2e:4d:c7:a8:58:4e:87:a6:
                    53:1e:32:bd:d3:73:f7:85:ec:6e:d9:2e:18:04:64:
                    5a:e8:e4:97:37:bb:6a:f0:ef:0c:86:ef:45:70:cf:
                    c6:27:80:61:92:49:0e:90:9d:bd:ff:e5:44:38:28:
                    d4:55:86:4c:c4:42:17:e1:bf:66:9a:6e:c9:34:8e:
                    d3:70:1f:9b:55:41:7f:99:17:58:28:b8:8a:f7:ee:
                    79:da:63:5f:62:ce:5c:2b:21:8d:60:1a:a8:a0:b9:
                    3c:de:0c:cc:2c:ed:87:2b:16:56:05:9d:39:6a:67:
                    ff:70:c7:cb:06:79:21:4d:9f:09:d5:f2:d9:ec:68:
                    d1:d0:7e:30:ac:7d:69:c4:19:77:cd:99:7b:d2:b6:
                    23:02:af:f1:0e:c5:85:0b:67:ce:d2:2a:0c:4a:10:
                    df:0e:40:cc:33:71:cc:e7:13:3b:c2:5c:4b:1e:d3:
                    66:9d:23:9f:57:fa:97:5f:ec:37:23:f1:c8:49:e9:
                    39:30:9b:8f:b0:d6:fa:9d:cf:8d:1b:a7:bc:fe:3f:
                    8e:ca:e6:60:9c:0a:0c:91:1a:10:7e:09:e0:ec:93:
                    70:77:6c:f4:4e:6c:2c:9e:02:d7:a8:b6:ec:da:1f:
                    d0:0d:ca:61:89:06:17:db:ab:92:f7:77:93:8a:3c:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:DF:26:EE:87:00:61:30:F4:8D:4B:3B:4D:33:3D:FB:5D:5C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d26ed126-d68d-3ef8-86ec-64e5a32fbe2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:7200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:1f:14:a3:54:b2:fa:2f:f0:0c:c5:71:52:cb:4f:47:f0:
         ec:88:4f:90:84:d0:4f:1a:2d:99:09:d4:57:be:d2:38:9a:c0:
         f9:80:2c:d7:48:ec:8c:2b:0a:64:db:d7:16:24:34:80:31:aa:
         7a:eb:c0:75:23:12:02:93:b5:eb:a3:83:46:df:f9:13:6e:7f:
         76:a3:5a:8f:c7:56:90:33:6f:77:16:95:ac:66:83:8d:ac:84:
         2f:7c:a6:ed:cd:f0:38:38:7b:57:7a:af:28:90:57:e1:bf:1a:
         f8:f9:84:b8:c7:70:60:67:21:81:2c:a6:0a:5a:da:86:94:4a:
         44:8d:17:4b:40:b5:72:d9:c0:9a:03:98:ad:6c:0d:43:5a:f2:
         a7:16:95:32:13:83:3b:57:1c:57:82:4a:76:da:36:a2:0f:d7:
         3c:01:a9:b6:f1:25:56:52:96:ab:fa:de:ee:a8:6a:31:3c:fa:
         34:62:c1:36:1a:1b:b5:55:2b:45:29:68:64:08:5b:7d:6d:82:
         7b:b3:1d:6b:4f:8b:74:14:17:63:42:25:ae:f4:e5:ca:4d:3e:
         36:38:cc:c4:cc:12:e0:04:3d:0d:b3:2a:82:1d:2c:80:23:09:
         ca:9f:ce:93:f5:d2:d9:c9:5b:68:28:4a:9e:a6:f6:46:5c:8d:
         4e:ee:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 03:10:04 2025 by rpki-client