Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
File:                     fa0b4834-eb01-397d-b065-c91c0aff8fba.roa (raw, json)
Hash identifier:          arOv3jHyW7GcCiHOfSE6SGWU0OZ1KHHXNag9uJDv14A=
Subject key identifier:   C6:99:14:5A:F2:49:51:F4:F3:CA:A8:71:09:CD:21:F2:D2:EE:02:9A
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584B8EACD142F981C7F9CA987E00
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     32590
IP address blocks:        2602:801:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d1:42:f9:81:c7:f9:ca:98:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=63065c18-03e7-4989-a605-70a98e6ff263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:40:d9:c1:7b:40:cb:68:be:7c:12:cf:4b:
                    d0:d2:c0:2b:6a:bd:18:27:d0:03:a5:1d:b4:0a:f8:
                    c6:d0:e1:c8:d6:fd:9a:04:5d:3e:28:db:d0:6b:c1:
                    ca:11:f8:10:8f:0a:6c:e0:63:bb:86:49:b9:02:67:
                    21:9c:2e:44:11:77:e1:01:3b:9d:8a:44:4d:ba:97:
                    d2:ac:1d:0a:68:1a:bb:08:2a:50:8a:7c:05:77:2b:
                    43:43:ae:70:02:db:ff:d0:59:64:5e:b4:e3:4a:70:
                    58:7c:b7:4c:73:1c:ed:6f:c7:db:12:d8:ea:63:89:
                    95:f6:1a:b6:b2:68:3d:fd:7c:5c:06:c3:70:cc:be:
                    d0:32:5a:9a:2b:9e:4b:c6:2c:c9:8f:b9:d1:15:35:
                    7e:5e:5d:97:04:5b:f5:51:43:5b:59:a8:e3:d0:4c:
                    30:50:f3:06:a2:6b:c2:e0:29:cb:29:f4:80:43:95:
                    61:9a:5d:33:a5:4f:6b:94:d0:66:05:23:7b:23:35:
                    15:22:16:b2:51:96:1a:ee:1f:d8:b5:44:f0:99:1f:
                    0b:4a:14:5c:7c:40:72:38:58:b4:a4:00:41:3a:da:
                    e1:2d:cf:ee:30:d7:0a:b6:8d:84:f2:08:f1:48:60:
                    a2:67:e3:91:a3:b7:ad:b7:5b:ab:ec:27:c7:2f:1e:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:99:14:5A:F2:49:51:F4:F3:CA:A8:71:09:CD:21:F2:D2:EE:02:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/fa0b4834-eb01-397d-b065-c91c0aff8fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:92:8b:33:69:56:6d:4d:09:8a:24:1b:92:8d:a4:43:75:69:
         01:6b:6c:b6:11:38:f0:70:41:20:45:5d:b4:37:1d:05:91:ca:
         a1:ed:ba:18:91:98:26:ec:dc:dc:73:31:b0:a0:af:36:3a:d8:
         a7:4d:48:81:e1:8b:c8:eb:0e:16:b2:c2:f6:ea:99:7b:41:a9:
         fa:12:61:61:66:84:3c:5e:62:64:66:d4:9e:3f:43:d8:cd:e8:
         fc:1d:10:9b:86:e4:f2:ae:d4:6c:95:a6:7d:8f:06:19:cc:66:
         d7:39:aa:12:85:14:d8:67:f0:ac:e4:ff:54:9c:a8:0b:63:3e:
         a4:0c:3e:7a:e3:0f:f3:04:72:5d:cb:ac:af:5e:81:74:8b:8b:
         78:69:47:b7:dd:eb:28:ef:b9:11:55:61:95:29:0d:a5:39:76:
         4b:8c:fd:5a:6f:9f:29:ba:e8:6c:d8:15:68:d0:41:49:6d:81:
         70:bd:eb:63:1c:6a:33:f5:a6:e8:ff:e9:96:bd:f4:c3:b5:2a:
         c4:df:f8:cd:49:cd:56:5c:51:d6:7b:06:26:52:fd:ee:98:e5:
         e8:27:6a:67:59:55:eb:c6:97:ef:ea:53:51:34:70:e0:7b:a6:
         4a:1b:66:eb:77:78:c2:d7:aa:ee:0c:67:15:d9:cf:76:96:ac:
         4f:df:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:40:46 2025 by rpki-client