Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/493ef107-8fbd-3ae8-8952-19aacff2aa26.roa
File:                     493ef107-8fbd-3ae8-8952-19aacff2aa26.roa (raw, json)
Hash identifier:          CbvPQFN2hnZZKk1nOu3ZGoL8vCyYEM8rHyDuz4eNxqA=
Subject key identifier:   CE:6F:05:BD:FD:45:2C:24:33:33:7D:FE:38:C7:04:E6:F6:CA:F3:30
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584B3556E405ACEF8D6669142680
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/493ef107-8fbd-3ae8-8952-19aacff2aa26.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     54681
IP address blocks:        2602:fba2::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e4:05:ac:ef:8d:66:69:14:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=fdd23397-fd5b-41f1-8dc3-42e5d22ecd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:08:b6:d8:3c:ea:09:74:ae:82:ef:0d:30:7c:
                    d6:e8:8e:d0:73:2c:3a:3e:b0:bd:72:68:81:22:0d:
                    00:56:58:53:07:8a:3d:a9:1f:68:b6:5f:58:60:a5:
                    39:f3:a7:66:35:e7:18:74:d8:5f:30:f6:5f:95:1e:
                    95:6e:7e:63:6b:bf:d8:d9:a1:cc:bc:38:60:41:6a:
                    58:33:29:06:f0:2b:72:45:b2:ab:02:f2:99:49:db:
                    0a:32:b2:0c:5f:9f:f9:ef:65:26:39:26:c0:c3:11:
                    5d:ca:45:48:1e:2b:f8:5e:e7:21:46:8e:2f:cf:f5:
                    58:cd:e8:a4:5a:77:1b:fb:c3:42:e4:3d:87:a7:6b:
                    65:ac:26:93:c7:97:16:d3:bb:d7:b4:32:d5:6b:09:
                    37:ce:ef:19:af:0e:72:c6:97:8c:c4:9e:08:87:b2:
                    9d:4c:a4:c8:b3:6e:f5:76:fd:b6:7a:08:43:82:cf:
                    cc:0d:c6:fd:b0:fe:cc:e2:0d:69:64:a5:ae:56:2b:
                    0d:fc:f5:02:68:47:45:0d:41:d6:8e:5c:76:58:e2:
                    92:85:84:f5:84:c2:80:59:f2:66:5f:aa:61:17:38:
                    47:2c:f8:bd:8a:d1:9a:70:dc:ad:3a:de:93:a8:4f:
                    1f:ae:2d:d7:51:f8:8d:fc:e8:26:b6:f6:90:ab:0f:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6F:05:BD:FD:45:2C:24:33:33:7D:FE:38:C7:04:E6:F6:CA:F3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/493ef107-8fbd-3ae8-8952-19aacff2aa26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:ba:64:42:68:fb:9b:f9:34:10:ca:e5:49:b3:da:c3:c9:
         77:11:54:18:27:72:f2:d4:9c:c2:2a:64:36:b9:3b:99:42:77:
         f5:db:fe:6b:ec:e9:05:7d:c1:62:1d:ae:f4:75:e1:00:9e:59:
         c6:70:a2:98:2f:c1:fe:04:93:15:10:ae:35:ab:99:32:b6:a9:
         cf:bb:7b:79:7a:0a:6e:d3:c5:f1:22:09:11:14:f1:82:e7:30:
         b9:ee:f9:d8:58:48:98:39:ee:12:9a:72:ac:a3:8a:e9:e3:08:
         5c:bc:2b:c7:9b:cb:cf:1a:50:17:0e:91:66:43:69:de:48:b9:
         ea:f1:30:44:eb:1c:f4:79:31:99:f0:50:0d:55:b5:f3:59:5f:
         f6:cc:51:7d:34:36:b4:a9:bd:0e:68:a8:d8:f1:26:84:1b:1e:
         9f:14:2f:66:5b:84:81:1b:44:26:21:26:a7:ce:55:5a:3b:fb:
         0c:04:1c:4e:cf:40:ca:38:ea:7f:39:30:ad:eb:6d:1c:76:32:
         cc:3f:ee:18:0a:9a:5d:4c:15:02:aa:7a:61:5e:0e:0e:9c:78:
         18:8c:d2:81:76:d2:b7:45:02:c1:07:02:7a:11:e2:16:a2:c0:
         5e:70:eb:59:0d:d0:8b:ba:25:f3:bb:87:cc:10:ca:e7:9e:93:
         b5:5f:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:56 2025 by rpki-client