Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/ddfb824c-add6-3930-acac-4b4c486ff648.roa
File:                     ddfb824c-add6-3930-acac-4b4c486ff648.roa (raw, json)
Hash identifier:          cpEzsiNTRATg111hWdij7mhdh7lF35Sd7tiaDE1e4Pg=
Subject key identifier:   9C:C3:DB:3F:B3:C1:A6:14:59:7A:B5:35:41:12:B9:46:70:43:4D:AC
Certificate issuer:       /CN=0059f687-be1d-4396-97d0-dbe0841392ac
Certificate serial:       010D0C9F4328584B84E765D0FCF4C25B197D2530
Authority key identifier: 91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/ddfb824c-add6-3930-acac-4b4c486ff648.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     23121
IP address blocks:        2602:f913::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:65:d0:fc:f4:c2:5b:19:7d:25:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0059f687-be1d-4396-97d0-dbe0841392ac
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=23097f4a-5e4a-4be2-ac7d-51d2ff766704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:5d:c5:17:6c:02:a2:77:ae:a1:0d:7b:87:
                    e2:12:b0:c2:26:34:53:fa:9e:b2:2c:05:18:99:51:
                    05:e6:8a:27:4d:8e:49:89:f4:a0:c3:66:b1:56:44:
                    be:fd:95:b8:cf:e7:1d:f5:4e:08:6a:72:ca:46:cb:
                    6e:91:f8:97:75:81:20:d8:de:0d:59:1b:8d:88:22:
                    d9:f7:3d:c5:52:a7:6e:70:34:39:54:fc:62:73:a1:
                    c7:87:0d:e7:1a:2c:77:05:c3:f6:02:13:41:7c:80:
                    c6:87:f6:a7:93:c4:a6:91:7c:6e:21:3c:85:0a:0a:
                    e9:b0:4e:e9:5a:dc:b4:86:6d:2f:69:47:fa:99:aa:
                    20:19:96:a9:b5:e1:00:89:10:79:87:47:64:a9:91:
                    e9:5c:91:bb:cd:23:b3:45:04:6f:ad:d1:f6:cd:82:
                    79:99:b1:da:5a:8c:c2:45:cb:fd:6b:90:01:bb:6d:
                    22:7e:f2:4a:37:24:13:08:51:a7:d4:4a:57:ee:25:
                    ea:71:67:49:f2:13:f1:35:d5:b9:1a:f4:35:e7:bd:
                    fd:5d:16:1f:42:71:4c:3b:1e:29:c5:fe:81:ea:66:
                    0c:58:af:b0:1f:8e:f7:d3:88:39:12:65:a3:e5:23:
                    c8:1e:b7:8e:91:72:b7:7c:2e:15:0e:7c:ad:b4:4e:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:DB:3F:B3:C1:A6:14:59:7A:B5:35:41:12:B9:46:70:43:4D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/ddfb824c-add6-3930-acac-4b4c486ff648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac/0059f687-be1d-4396-97d0-dbe0841392ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:5A:27:BD:FD:4F:FA:BA:5C:37:F9:84:46:9D:C8:D9:14:7A:CE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0059f687-be1d-4396-97d0-dbe0841392ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f913::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:8f:8f:5b:72:b4:87:c7:8b:32:2a:13:02:4e:11:f9:5a:
         55:5d:d0:e6:7c:ad:d1:74:db:10:3d:2f:ff:1a:ec:66:aa:1d:
         0e:fc:18:d5:73:70:f7:c3:8e:5b:0e:2a:c3:75:81:a8:88:d4:
         aa:ff:5d:aa:6e:1a:d3:1e:e9:74:c1:59:b4:ea:02:4c:be:e4:
         43:6f:48:e0:c2:df:eb:6e:00:4d:75:2b:b4:b3:08:77:13:76:
         5c:df:3d:a8:0d:16:61:75:f9:12:37:2f:a8:22:3d:36:e9:9c:
         95:2f:57:6e:8c:5a:c4:82:30:f7:d1:47:14:68:ea:29:a8:95:
         ec:c1:53:95:0a:b2:3f:cc:a2:c4:2a:fb:cc:dd:14:25:18:53:
         cb:22:52:3c:a9:07:64:97:d5:48:54:39:ed:2c:bf:27:77:5d:
         ad:78:cf:74:e6:ef:3a:1f:98:51:b2:48:13:30:66:fd:04:b7:
         db:47:76:26:96:fe:c5:5a:af:f4:a6:0b:e8:0a:6f:2a:ae:f6:
         e5:e1:12:26:fe:ea:a2:20:56:17:4d:46:cd:a4:25:06:7c:3d:
         b1:cf:02:64:df:bb:e4:15:7d:44:2c:12:43:56:36:60:48:de:
         42:b6:2c:20:06:4c:8d:e1:4e:fb:79:6d:1b:d0:9a:f2:53:9f:
         34:54:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:48 2025 by rpki-client