Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
File:                     3a150253-546d-3466-be6d-b98a368a2cdc.roa (raw, json)
Hash identifier:          yg4SUEJoey+9+sxsWj61lGr8s2yrygc/IqL87oDW+uc=
Subject key identifier:   FE:B7:E0:66:46:62:AB:E0:F6:23:7E:7F:74:96:F9:BA:A1:0F:04:21
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B5F371DDE6E79E467DA3439B0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:1d:de:6e:79:e4:67:da:34:39:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=de358872-9812-453d-a3a7-780dd94b8453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:8f:33:10:ca:29:66:51:87:9e:69:19:c5:
                    a1:6a:0a:d8:0c:ce:ba:73:72:da:a6:c7:fe:a6:a7:
                    cc:b5:ed:a8:f3:b0:f0:38:c6:a3:b6:0b:bc:91:90:
                    11:8c:a4:6f:67:65:e8:4e:5e:4d:3e:84:9e:2b:07:
                    33:ab:25:2c:e9:09:c8:40:f5:0f:f1:e1:83:5f:6f:
                    f2:6f:47:0b:62:e6:63:eb:05:ff:a8:4d:57:6a:f9:
                    41:73:7b:6d:35:3f:be:54:21:9c:27:55:39:f2:7f:
                    a7:5e:60:92:e9:11:a9:a6:4e:cb:69:d5:47:a4:f0:
                    dc:e9:c8:3d:7a:c6:93:95:07:09:f3:9d:7f:61:83:
                    67:e2:7c:be:3c:41:7c:23:1e:70:ff:81:44:97:e7:
                    13:61:75:77:8b:9b:7f:21:9e:5f:66:83:21:9c:fd:
                    24:58:50:45:c2:cf:d0:cc:50:46:fb:07:78:ab:a3:
                    25:a5:92:5a:13:ad:d9:32:63:8c:b8:80:a2:6a:67:
                    90:dd:8c:b9:9c:22:d3:af:c0:3e:37:b8:d3:4c:3e:
                    c8:71:d5:0c:cc:61:64:bd:a0:eb:10:ab:8a:2b:a8:
                    2b:37:d5:d2:82:3c:aa:da:7f:cd:00:a1:84:0f:72:
                    d0:80:6a:89:53:fe:7d:d4:a7:95:c7:6f:3f:06:91:
                    19:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B7:E0:66:46:62:AB:E0:F6:23:7E:7F:74:96:F9:BA:A1:0F:04:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3a150253-546d-3466-be6d-b98a368a2cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:be:c5:6c:5f:a2:82:9e:1a:d3:3b:f9:70:19:17:1f:14:3b:
         c3:eb:c9:4d:ed:0f:ac:61:6c:50:8e:9a:36:67:51:67:af:8e:
         2f:05:83:eb:60:53:1b:90:ed:43:83:0a:7a:b8:21:17:ee:bf:
         b4:21:6c:62:be:57:93:a1:fc:20:ce:54:d3:41:af:19:23:a0:
         89:18:cd:7f:8c:25:02:87:95:09:3c:80:cf:a0:6c:46:0a:3e:
         67:1d:6b:89:3d:b9:4f:48:19:b7:b1:df:1e:24:32:57:e5:9e:
         ad:d5:1d:a7:20:a5:07:39:aa:77:ac:c8:32:41:e8:f5:8c:7d:
         df:66:39:d6:e9:48:5f:93:75:33:95:0d:c6:ef:0a:ad:46:6f:
         29:e1:ac:44:83:29:f4:a0:22:74:82:d9:3c:e3:70:41:45:cc:
         ea:c9:1f:3d:5b:73:7d:0e:91:e0:b4:dd:c6:fb:22:d3:03:cd:
         38:e4:81:44:75:cf:3a:74:09:42:0d:c3:64:ba:66:34:2c:c2:
         39:4a:ec:14:2b:a9:9e:80:cc:40:13:3a:b7:4f:d2:94:76:29:
         a5:27:97:b9:de:ae:3a:d6:7e:05:76:a4:52:fc:78:0d:a8:65:
         cc:ff:54:93:18:6c:f4:d7:fa:1b:35:ca:7b:05:78:58:72:5d:
         ac:d2:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:56:39 2025 by rpki-client