Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa
File:                     15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa (raw, json)
Hash identifier:          7zq8YprobtPKPayGcdPuUNdApQEGqoeb570xRjs7GhY=
Subject key identifier:   A6:FD:E9:8C:84:AF:4A:4E:ED:49:BC:96:08:9B:7B:66:EA:BF:90:50
Certificate issuer:       /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial:       010D0C9F4328584B6BC7481D12F6CADDA24B3200
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     137509
IP address blocks:        2602:fbe6:10::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:48:1d:12:f6:ca:dd:a2:4b:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=523b98d6-398e-42f7-bb3b-1078390f6097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:79:02:46:fb:e2:3d:a9:3f:18:0d:a1:19:
                    da:0f:0a:63:1e:02:c8:e7:48:46:0c:fa:e0:94:e1:
                    8c:7a:78:f8:75:04:37:f3:0a:45:bb:26:0a:8b:1b:
                    f7:a8:e8:f1:77:16:62:d5:86:ad:52:52:99:9b:c9:
                    6e:6b:96:6c:aa:2f:5b:db:6d:52:74:e2:7d:e4:0f:
                    d5:ac:be:38:83:f9:ba:2e:df:2c:90:73:49:00:2c:
                    85:62:38:d5:cb:f4:9a:98:aa:f6:46:9e:1f:86:94:
                    98:9b:8f:e0:b5:98:6f:61:98:21:ac:ef:67:99:9d:
                    5d:30:5c:5e:3a:71:2f:f1:3b:61:1d:ec:50:fd:c7:
                    fa:0a:2b:8d:ab:66:e6:54:31:d7:a6:c7:00:db:41:
                    96:58:ac:7b:cb:03:4f:8f:9f:45:1e:cc:40:83:88:
                    85:87:38:34:3e:02:38:4e:bc:74:68:1f:ae:e3:ed:
                    46:c0:ff:a1:cb:7a:ca:13:a5:67:cb:e6:1b:db:ae:
                    79:7e:2d:13:bd:d2:4e:f2:aa:05:33:e7:00:dc:57:
                    e8:db:50:8c:e5:a4:67:96:6c:e0:66:ac:f0:2e:ff:
                    55:8f:8c:81:3a:02:94:0c:00:9b:54:a7:98:ef:6b:
                    d2:6f:31:23:0b:d8:4e:1d:0c:9f:65:ca:8b:db:6a:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:E9:8C:84:AF:4A:4E:ED:49:BC:96:08:9B:7B:66:EA:BF:90:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/15db4c7f-a0e2-3d65-b833-2756ea3409a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe6:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:5e:8d:a7:f5:3f:cc:ea:36:ee:27:b9:8e:71:73:d3:c7:
         41:93:e2:bc:a3:e3:ae:55:c4:3e:37:61:a1:0f:d4:0a:66:27:
         da:91:eb:05:ed:34:10:c5:95:31:36:73:12:fb:a7:3a:52:a5:
         34:09:f8:22:e9:1a:8d:89:40:ff:74:4b:b2:36:de:9b:a1:bc:
         ca:51:04:ce:ed:83:f4:53:93:8c:91:b5:7a:62:27:6d:e9:84:
         2a:d0:bb:3e:23:df:dc:f0:7a:03:ad:54:4a:27:9d:2f:bd:01:
         f9:d5:60:22:6e:cf:f0:31:aa:a1:67:ff:e3:c0:36:7c:1f:24:
         cd:d1:8c:7a:98:dd:71:8e:ac:4e:63:04:4c:bf:fb:3a:14:09:
         ce:6c:6d:a4:17:98:e1:76:ca:ee:8e:e7:a8:b1:54:d6:a8:df:
         37:53:c3:03:d3:42:a2:7f:b4:60:49:53:75:ee:f0:a2:62:e4:
         3c:5a:18:c9:3d:a5:a4:f9:7e:66:da:54:74:4d:b1:0a:70:a5:
         64:1e:f9:94:87:ee:a0:94:15:28:67:e2:8b:55:7e:da:a8:ad:
         a9:5b:f8:d3:3b:79:db:9b:f0:3e:6d:fc:2d:e7:f7:14:2a:88:
         61:82:f8:e6:a5:0f:d6:c6:73:65:81:b9:36:29:53:69:b7:a8:
         5b:a4:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:26 2025 by rpki-client