Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa
File:                     07f32588-d6b4-3250-8be3-5e0ce175231a.roa (raw, json)
Hash identifier:          zNeCh23zNGjPNywpZrerd7jwy4gzyZZ/7OOe1w5/cvM=
Subject key identifier:   CD:56:B1:11:6C:20:D5:55:83:06:83:E8:22:E3:4F:4C:EE:70:E6:46
Certificate issuer:       /CN=f6a6838a-15aa-48f4-960c-d9d0071829af
Certificate serial:       010D0C9F4328584B5571E2631FAA4CD61F5AE780
Authority key identifier: 21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:f95d::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e2:63:1f:aa:4c:d6:1f:5a:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6a6838a-15aa-48f4-960c-d9d0071829af
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=04c16ed1-0b57-4434-b0f1-76b62105b9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:c9:3c:ca:72:d7:f8:12:04:79:b1:b9:13:
                    23:2e:bd:10:31:86:32:b4:12:1d:7d:fe:16:2b:fb:
                    cc:44:38:a0:23:33:45:8f:e7:e0:6d:d1:7e:9b:8a:
                    cc:38:0e:16:73:c3:fe:7d:3a:03:1f:a7:37:cd:a7:
                    0c:fe:a5:2a:49:46:f0:f6:02:a5:6e:2e:9b:e0:4f:
                    2e:5b:39:8c:89:24:40:42:10:5a:e5:ba:9a:55:1d:
                    ec:24:ae:2f:b4:91:a0:aa:eb:05:84:4b:c6:fc:70:
                    7f:dd:af:c4:02:43:85:8e:9d:40:cd:be:b6:1e:c3:
                    a8:8a:d1:3c:53:be:72:e4:67:c5:bd:ef:69:c1:e6:
                    a0:78:2c:d4:d2:f9:1c:3c:7a:90:91:5b:e0:a0:10:
                    07:44:1c:05:03:24:c4:a6:aa:ae:8e:f4:06:43:49:
                    32:e4:e5:d2:0f:bc:ef:20:ed:0c:4e:e6:08:d0:53:
                    82:ee:13:4c:fc:af:86:dc:67:93:87:2c:17:53:cb:
                    02:1c:41:19:78:34:9f:df:b5:f7:1a:e3:da:c2:9a:
                    51:15:c8:ce:da:d3:21:1a:76:cf:43:96:76:78:15:
                    e7:61:e1:d6:88:e6:83:52:2d:21:4a:6c:bb:29:1c:
                    bb:ea:55:5e:cb:17:c8:8d:fd:c6:4a:96:b2:e5:40:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:56:B1:11:6C:20:D5:55:83:06:83:E8:22:E3:4F:4C:EE:70:E6:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/07f32588-d6b4-3250-8be3-5e0ce175231a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af/f6a6838a-15aa-48f4-960c-d9d0071829af.crl

            X509v3 Authority Key Identifier:
                keyid:21:E0:1B:5D:28:28:D4:EE:B8:B2:77:B8:09:DD:A0:4A:6D:BA:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f6a6838a-15aa-48f4-960c-d9d0071829af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95d::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:b0:f9:74:a2:01:c1:df:9c:a2:7b:bc:d5:d1:8b:1a:c2:
         13:e4:43:5c:e5:a3:a2:03:b5:c5:67:6a:25:f4:78:66:c4:dc:
         33:25:c3:e7:f4:df:96:a0:98:b1:10:53:4b:1c:75:c0:ab:8f:
         0b:5e:10:c3:c7:40:97:ce:1f:f3:cd:87:5b:45:77:26:2d:0c:
         db:e1:02:63:47:78:6d:ca:ae:4b:15:3b:82:ef:c3:b3:85:a4:
         c5:4d:4b:65:e9:a8:a0:45:89:49:50:ce:1a:fa:13:a9:cd:89:
         7c:1c:cf:a0:e4:1a:94:49:fb:69:05:91:24:6f:38:cd:99:67:
         68:80:aa:72:05:32:fc:12:eb:da:82:d3:ca:ab:d1:35:0c:28:
         32:a4:d0:db:de:17:9d:b8:2b:e5:2a:2b:2b:f7:d5:80:10:c9:
         a5:72:f5:0e:68:85:11:07:04:94:12:ad:3c:d8:ec:2e:50:41:
         aa:94:b5:2b:9d:00:b3:fe:9a:54:3d:d3:53:37:8f:48:e1:28:
         66:73:b6:56:43:84:f6:d0:8f:03:b5:96:20:50:0a:62:4c:1d:
         e8:8f:01:1f:d3:db:a7:b8:44:ec:3f:21:27:1e:c5:3b:09:7e:
         39:2d:bc:0d:da:4f:59:ac:3e:a8:93:44:e9:30:d2:49:31:61:
         08:df:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:22 2025 by rpki-client