Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/8eb84566-5391-33d3-aa7b-ff1a4c2a0f63.roa
File:                     8eb84566-5391-33d3-aa7b-ff1a4c2a0f63.roa (raw, json)
Hash identifier:          xUzXTton9NVLLkSCvr0fcKtUexpFki9T82KlX3IrBUw=
Subject key identifier:   31:60:2B:F5:1B:31:47:03:CE:DC:C3:28:06:C2:C9:F0:BF:11:DA:B4
Certificate issuer:       /CN=acaade25-9776-4234-a203-4f2776b69f08
Certificate serial:       010D0C9F4328584B7C876544FAAF23EE05AFD360
Authority key identifier: DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/8eb84566-5391-33d3-aa7b-ff1a4c2a0f63.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     401339
IP address blocks:        2602:f825::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:65:44:fa:af:23:ee:05:af:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaade25-9776-4234-a203-4f2776b69f08
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=d7f2506b-1d29-4ddb-bf39-85a99ca28259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:b7:a1:b2:58:d3:1d:95:03:68:94:4d:f1:
                    46:0c:7a:83:1a:ad:19:a3:1a:37:eb:c2:12:2a:c7:
                    fe:e4:ac:9a:00:2b:de:35:c9:cc:36:0e:38:15:d4:
                    85:54:ba:47:f2:e5:c0:1b:6f:61:be:e5:1c:b7:39:
                    73:64:b5:5e:4c:8d:bb:fa:aa:be:e3:1c:76:70:6e:
                    de:fc:8c:e9:7b:12:45:8f:a1:f8:a0:db:b5:18:8d:
                    57:9f:76:22:4e:1f:65:f1:0f:db:1c:2f:34:8d:72:
                    7c:5f:1a:02:ee:86:6a:27:e8:a5:0f:b6:d8:cd:f6:
                    4d:29:10:eb:ef:4f:24:da:1d:0f:1d:fb:e2:41:2c:
                    3c:ae:72:c1:fa:b2:a5:da:42:2b:c0:71:fa:d2:c2:
                    38:23:a0:39:07:0e:c8:9e:00:62:f3:11:1b:2d:6b:
                    2d:1f:38:20:3f:94:d7:30:2d:b3:3e:6d:33:87:af:
                    fd:15:0c:fa:26:7d:fe:8b:2e:3b:54:08:ff:0e:93:
                    c3:e5:92:05:22:a3:bc:0f:f3:a6:32:c9:ff:f9:e8:
                    61:8a:05:67:aa:cc:96:60:a4:b6:d3:72:e0:8e:79:
                    cd:e2:8a:be:6f:bf:94:bf:03:d6:1f:99:11:73:10:
                    0b:5a:be:84:17:25:dd:46:2e:3f:e6:ca:31:9d:96:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:2B:F5:1B:31:47:03:CE:DC:C3:28:06:C2:C9:F0:BF:11:DA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/8eb84566-5391-33d3-aa7b-ff1a4c2a0f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f825::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:ed:e7:c3:11:51:f9:ba:f4:0f:4c:4d:0f:fd:2d:b9:4f:
         31:24:48:eb:28:c5:de:59:4d:54:86:20:2c:bb:c5:10:c1:fc:
         ef:8f:18:4f:72:a7:d4:68:e4:ab:2b:cf:a1:ac:d7:79:1f:a9:
         66:eb:5d:6b:b2:91:63:ca:4c:46:6f:b6:84:a8:86:e3:13:12:
         7c:29:2e:a4:f7:10:8b:8f:c4:8d:67:2f:44:b5:a5:b0:f5:76:
         d8:90:bf:95:09:ba:2f:87:91:06:af:d9:57:11:00:81:e4:89:
         81:78:fb:bf:51:3b:46:74:2b:39:f7:b8:ce:9c:5c:11:fe:93:
         de:99:5e:8a:3f:4f:09:68:da:43:8b:6e:cd:57:ab:42:31:d7:
         1f:1c:fe:0e:fa:74:27:1e:50:31:da:fc:09:f3:31:b6:67:97:
         f7:42:f9:6c:54:45:c0:44:99:34:da:af:b4:3a:58:4b:77:a7:
         3f:2e:07:17:d0:36:b5:6c:de:79:54:5a:2a:9f:c4:f6:04:10:
         4f:6f:e6:b2:21:b4:b8:27:ff:ce:1f:6d:49:d8:a6:9e:35:d5:
         74:9b:71:4f:2b:bf:fb:b4:c5:f4:86:bf:e4:ea:9b:66:55:59:
         2a:69:83:98:86:51:15:1c:7e:a1:fc:d7:5e:c2:b5:e9:db:83:
         b2:49:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:52:55 2025 by rpki-client