Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
File:                     0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa (raw, json)
Hash identifier:          kevY43deu6P1h6QqvkmNeZtVgoHOEHoUADzzeLVW7Dc=
Subject key identifier:   23:3D:D0:AB:05:34:83:55:02:34:88:F8:60:4E:6E:41:E5:4D:89:F3
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584B3556E6BC1D168BFB9B64E400
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     32604
IP address blocks:        2602:fa9c:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e6:bc:1d:16:8b:fb:9b:64:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=7e015740-befd-4d20-a366-fc7c5c20df1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:d3:1e:73:39:89:24:3c:0c:e5:40:f6:da:
                    b2:50:2c:96:33:75:a2:75:d1:a8:9c:4d:d0:b6:27:
                    0b:93:a3:b7:3f:e0:48:a1:98:ef:09:64:6c:b8:18:
                    14:52:c6:f6:ef:8c:e4:99:cf:1a:24:d1:73:13:54:
                    e5:ae:9f:ff:7c:76:33:31:29:0a:24:32:86:fe:df:
                    94:c8:c7:44:fa:8e:ba:bf:c5:a8:fc:07:49:c5:7c:
                    3a:f1:2b:85:4f:bf:a4:ee:be:6a:bd:81:31:f4:d7:
                    7e:0e:42:c5:1e:27:12:59:e1:4e:d3:71:b4:85:ff:
                    c2:19:cd:0c:9a:37:74:ca:14:19:e5:94:ea:3c:0c:
                    7b:65:b1:4e:08:f0:f6:90:0a:e9:86:6a:10:63:d3:
                    e5:1c:cf:60:a9:4d:d7:ea:a2:1d:39:a6:17:64:72:
                    ff:01:07:c6:7e:a3:de:c4:45:91:b0:48:88:e8:fa:
                    fc:53:68:be:4e:e1:3b:f0:45:55:2f:8d:f6:b0:b3:
                    bb:9f:3c:f8:dd:a5:73:42:c8:6b:40:2a:95:68:be:
                    78:eb:7c:e4:6a:ad:e6:fc:f6:16:95:5e:e0:80:6a:
                    5c:40:0e:bb:1a:92:f5:73:12:b4:c4:62:a8:8c:13:
                    e2:ae:2e:33:7a:ae:3d:71:60:04:c4:f6:d6:aa:cb:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3D:D0:AB:05:34:83:55:02:34:88:F8:60:4E:6E:41:E5:4D:89:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/0ebc0ba8-d251-3f18-a70e-1b6a0d6df8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:69:12:96:38:53:6f:17:72:ee:b2:81:7a:01:03:ae:99:
         08:20:89:79:be:54:0e:91:53:af:4f:2d:87:4e:ee:b7:8b:4d:
         5a:f0:8b:ee:70:30:29:4b:13:13:65:0f:1d:8e:e3:fd:ce:e7:
         f9:08:52:44:e2:77:60:ae:35:5f:06:7a:26:7c:9c:22:dc:a3:
         3d:39:61:bf:25:fe:68:03:1b:7e:b3:87:7e:49:97:0b:89:67:
         fe:4c:77:6f:cf:29:7c:bd:34:e3:14:b2:53:73:88:9f:1e:34:
         a9:2d:f7:05:ca:59:71:09:8b:82:5c:b5:31:a6:09:29:6b:54:
         e9:37:77:fa:ae:d9:c5:82:33:1e:9e:c7:65:95:14:51:76:69:
         0d:52:ab:0d:ff:ea:43:0c:0d:8e:a6:b8:e4:37:e1:9d:51:4f:
         01:53:55:3d:9b:43:39:5b:2a:76:31:3d:b0:4d:ec:25:5c:36:
         c1:d9:54:97:d1:5a:63:64:ee:f9:20:00:b6:f7:16:08:fd:e3:
         9a:20:47:68:42:27:29:b6:b2:6c:d8:e8:5b:f0:e5:06:6a:04:
         62:10:0d:7d:8e:c4:92:88:51:ce:be:1b:d6:0e:7e:89:c6:67:
         c3:fa:4f:b0:79:eb:f2:fc:85:e9:14:ae:c2:9e:c9:a0:2c:03:
         2f:73:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:07:49 2025 by rpki-client