Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa
File:                     79353f45-382e-3f7b-8ee9-d418323d6524.roa (raw, json)
Hash identifier:          wrdEOdJcz85rnCw9l6n1Jk8fNFhsYqLmB5FL3PGW2RE=
Subject key identifier:   0E:E3:DB:91:64:9F:24:C8:85:3A:43:73:78:8F:10:E3:D1:40:5E:FC
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584AFC1BF18E6B42DE29BB239740
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13627
IP address blocks:        2602:fba3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f1:8e:6b:42:de:29:bb:23:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=eb5a2935-6ef4-4fd8-8976-ab90871247b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:e8:72:73:23:ef:0f:b5:19:a3:8f:09:77:
                    f5:d9:65:e8:23:55:d4:f8:f4:9e:6e:ba:99:b5:a9:
                    40:a5:1f:f8:ee:2f:09:38:6e:7e:f8:88:92:fe:0f:
                    0f:d7:e5:14:92:a5:d8:6d:cf:11:b3:98:e2:b6:d2:
                    4b:9c:d7:f9:19:2e:e1:a7:84:17:00:35:43:6c:07:
                    74:1e:04:fd:7e:f8:06:46:f7:b9:01:ce:91:f3:b2:
                    a7:1a:92:8d:9e:95:f0:8d:6a:86:ba:d5:b6:62:19:
                    98:c0:9f:b8:8c:9f:a3:40:f4:e3:54:cc:fa:23:1e:
                    1e:2e:51:42:53:6e:05:90:2d:30:80:c4:1f:49:2c:
                    53:02:6b:20:f2:fb:8a:47:df:6e:96:45:9e:e3:be:
                    76:e6:3f:ee:b4:36:d8:6c:3b:d6:d1:0e:34:15:3c:
                    b9:b9:7c:6a:6c:02:af:41:2d:66:e9:a4:2e:08:92:
                    62:5d:a2:c3:1b:38:1a:86:69:55:be:69:a6:2d:4e:
                    df:34:94:09:6d:d4:31:2e:fb:78:03:02:5e:e7:66:
                    db:11:d6:99:26:e2:ee:f0:18:e2:81:24:cf:98:cb:
                    16:91:a2:c8:18:55:4a:d0:c2:42:d4:52:32:90:4a:
                    40:dd:32:cf:b9:c4:88:5e:41:f7:65:6c:eb:cb:d8:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:DB:91:64:9F:24:C8:85:3A:43:73:78:8F:10:E3:D1:40:5E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/79353f45-382e-3f7b-8ee9-d418323d6524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:05:f5:1c:7f:ff:12:68:54:49:16:e2:b7:bf:30:d4:fe:
         23:e7:04:9c:eb:8b:00:d8:70:72:15:02:bb:c9:15:ea:62:06:
         91:30:04:a3:96:dc:87:a1:55:4e:e8:b4:47:1c:4d:d4:b8:13:
         ff:19:96:d5:00:9f:64:26:20:bd:a0:62:ea:cf:90:dd:d4:f2:
         08:01:36:2b:26:89:09:bd:c0:ac:9b:b7:54:10:82:85:c4:67:
         84:e7:65:fc:5b:cb:fe:2c:1a:c5:a8:67:76:ab:8f:e8:ba:8b:
         88:1b:6a:84:cb:d2:f0:35:12:38:f8:09:e9:c6:3d:fe:fb:e0:
         e2:ae:e9:ff:8e:9c:b2:80:4c:50:64:bd:d8:b7:1f:db:f1:9b:
         d9:30:0c:34:8d:a5:a3:c4:bb:ad:4b:c3:ed:3c:51:d7:a1:11:
         05:28:bb:e2:34:1f:cd:1c:ec:db:90:e5:14:ca:5b:9b:6b:a2:
         d0:37:fd:10:38:36:69:e7:6c:ae:8e:b0:1f:ef:4f:38:5e:2b:
         71:b3:4f:49:6f:ba:ae:68:0c:f5:83:f9:55:85:e0:8f:9e:e3:
         92:15:93:db:33:ff:bc:ac:45:4b:a2:1a:4c:d6:42:6f:9d:48:
         3b:83:a5:37:73:d1:87:0f:d0:30:2d:76:32:37:5c:3a:85:60:
         10:11:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:38 2025 by rpki-client