Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
File:                     5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa (raw, json)
Hash identifier:          83k6bOWq2sRJsLcd9ii1UT0sjPoYtnIRK++2uCTBhxg=
Subject key identifier:   15:7D:DC:11:2D:AA:DA:D5:3B:E1:48:37:13:DC:19:96:4A:00:E4:55
Certificate issuer:       /CN=62f9290e-905b-4384-a03f-fbec24a43858
Certificate serial:       010D0C9F4328584B62020CA3E2E84E98A5A76980
Authority key identifier: DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     683
IP address blocks:        2602:278::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:0c:a3:e2:e8:4e:98:a5:a7:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f9290e-905b-4384-a03f-fbec24a43858
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=e14d5ff1-3c4b-40af-a507-aef9febb3c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:c4:ef:f0:4f:ff:9b:18:b3:6c:4f:74:a4:
                    9f:0a:32:1e:bc:f3:26:7e:f8:5d:12:6f:6a:c4:ab:
                    bd:61:b2:a2:25:9c:6c:49:00:80:ad:eb:e2:4c:4f:
                    8d:ad:c7:64:b3:bd:71:cf:26:63:6e:39:eb:7d:b2:
                    a6:3c:71:01:85:d9:eb:dd:73:21:b9:4e:a8:eb:9b:
                    cc:db:51:9e:5e:f3:6d:ff:14:2e:17:15:3e:25:ea:
                    28:e9:d5:0c:e9:9c:9e:e6:24:04:09:1c:24:d7:d5:
                    d7:4e:c6:93:72:28:50:ea:70:64:49:bc:07:af:7a:
                    b4:9e:7f:1f:58:1c:5e:5e:c6:cc:a8:96:8d:83:7c:
                    fb:7a:c5:06:25:b2:9a:35:a9:9e:ec:22:8e:1e:81:
                    96:c7:c6:d2:2f:b2:f0:f1:f5:3a:39:37:ee:3c:f3:
                    9b:43:75:2e:16:de:94:81:8e:6a:f8:64:1e:48:c2:
                    32:47:52:b3:9c:fb:7c:e2:dd:21:5a:74:62:ef:51:
                    8d:6e:2d:c0:be:b0:ae:82:89:83:be:5c:ff:3f:22:
                    cf:10:83:ff:eb:9b:34:ea:e1:b7:08:90:95:33:1f:
                    1f:31:0a:30:a3:31:b3:7c:dd:c0:02:3d:26:f4:c5:
                    88:ee:26:ce:ae:5f:54:9f:21:d3:4b:d0:0f:ec:e9:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:DC:11:2D:AA:DA:D5:3B:E1:48:37:13:DC:19:96:4A:00:E4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/5ad628d2-cff0-3eea-ad5d-af6af4a6dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858/62f9290e-905b-4384-a03f-fbec24a43858.crl

            X509v3 Authority Key Identifier:
                keyid:DC:A4:47:1D:FE:4E:7C:71:C8:40:3B:73:60:AF:06:53:E1:24:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/62f9290e-905b-4384-a03f-fbec24a43858.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:b3:07:ce:c1:08:db:24:60:d6:21:35:c3:a6:99:d2:9a:
         74:9c:cf:89:a7:4a:f3:94:3b:00:49:13:8a:8f:06:3a:45:15:
         54:04:18:54:86:99:63:5e:1d:08:a8:7e:b2:0b:bc:21:f7:5b:
         98:2e:a3:4f:b1:88:b5:1e:9e:24:74:86:50:6e:25:52:ef:80:
         fa:b8:7e:d7:d9:11:f1:88:e4:e7:84:e2:57:71:09:33:2f:de:
         f7:c4:e7:e7:36:03:03:ea:d3:74:07:c8:31:be:4c:d6:fd:60:
         3f:50:27:16:c1:de:0e:72:be:47:87:49:09:ec:5a:6a:1c:5c:
         8f:9f:fd:25:48:65:fa:54:e6:6d:0c:85:66:7c:3d:a2:f9:76:
         fb:36:3b:f4:6b:0b:4d:4b:6d:80:f6:88:40:e2:85:dc:bd:b4:
         59:a1:a2:a5:f7:80:55:07:be:bb:fd:7b:ba:ba:88:5e:07:73:
         42:68:95:33:6e:ed:51:d4:df:10:25:af:78:1b:b0:4a:ac:0c:
         56:89:35:da:09:cf:65:67:83:55:dd:b0:16:cb:1c:a3:e9:31:
         b9:f9:07:20:96:2b:6c:e6:37:c4:c5:19:27:b7:77:8e:71:f3:
         35:5f:4f:f3:82:67:2c:93:43:49:df:bc:69:4c:7c:36:c6:4c:
         d9:24:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:36 2025 by rpki-client