Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cab0cc28-4673-3e6a-a997-4665cab4df46.roa
File:                     cab0cc28-4673-3e6a-a997-4665cab4df46.roa (raw, json)
Hash identifier:          EKb0kYLyCDThS1v8l43HRpk/sU4UHNhOflHI9SWpeek=
Subject key identifier:   FB:B0:D4:E6:07:BC:83:02:02:4C:64:E5:B0:2E:A0:D1:F8:1D:93:B9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B4C5322BD829E505094D59D80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cab0cc28-4673-3e6a-a997-4665cab4df46.roa
Signing time:             Wed 24 Sep 2025 06:36:39 +0000
ROA not before:           Wed 24 Sep 2025 06:36:39 +0000
ROA not after:            Tue 23 Dec 2025 07:36:39 +0000
asID:                     153259
IP address blocks:        2602:ffe4:c7e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4c:53:22:bd:82:9e:50:50:94:d5:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 24 06:36:39 2025 GMT
            Not After : Dec 23 07:36:39 2025 GMT
        Subject: CN=ae2d8d4e-6e3c-4674-83e9-46bf102a12f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:60:58:eb:a1:d6:be:1b:ec:90:d2:50:29:
                    f4:42:0b:5d:88:09:57:b1:ef:ee:2d:ca:cc:84:4a:
                    5b:0b:93:d5:02:d2:68:58:8c:46:a1:2b:47:c4:71:
                    60:a9:4c:65:df:13:b1:e9:23:1b:89:5c:bf:68:b6:
                    74:52:b8:1f:de:15:32:8c:74:e9:df:b2:79:18:ac:
                    a0:26:b8:0c:ab:b7:2d:21:5b:fa:3c:b2:21:a6:a0:
                    98:90:16:1a:7a:95:90:e6:95:b9:55:55:d7:ca:34:
                    8b:42:cc:ec:04:ae:48:72:12:bf:e7:6f:4b:b2:1e:
                    14:d8:39:3b:af:3a:a0:6b:92:13:4f:2d:c7:30:4a:
                    27:6b:72:31:d8:d1:20:f2:78:bb:a5:c0:5b:b6:c6:
                    aa:07:77:de:22:d0:77:14:fa:91:3f:e9:cf:98:ca:
                    68:0b:31:ad:05:ac:28:a2:b9:4a:a6:a1:34:89:87:
                    24:14:6d:3a:e6:d4:9f:21:b2:f4:b5:61:d8:28:1a:
                    d8:4c:e3:4d:ad:67:25:ca:e8:4b:31:95:9d:07:53:
                    9a:f7:ea:d0:7b:db:59:68:0a:b0:0f:8e:17:ab:ab:
                    6a:61:a2:2d:b7:c5:94:c9:66:d1:e3:cf:f7:2d:4d:
                    76:6a:5c:21:9a:19:61:35:7d:2d:5d:75:54:b7:43:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B0:D4:E6:07:BC:83:02:02:4C:64:E5:B0:2E:A0:D1:F8:1D:93:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cab0cc28-4673-3e6a-a997-4665cab4df46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c7e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:59:ed:44:31:5d:7c:b3:0f:a1:6d:22:42:53:03:2f:17:96:
         b9:8f:8b:35:2d:cb:0d:62:bd:e0:0d:0a:90:d4:22:ec:39:97:
         32:93:05:4c:2f:15:53:58:8a:e5:a6:a1:14:3a:eb:7f:ad:65:
         b9:b4:a1:d1:09:0a:1c:ac:a3:7b:a6:5a:65:55:28:ba:32:31:
         a3:df:9c:a4:2c:30:ec:52:55:64:cc:90:18:fc:97:3b:ab:92:
         21:03:87:a3:4d:96:f4:bc:ef:58:e8:a0:90:38:db:3e:6d:2d:
         e6:42:4d:4d:15:14:43:ec:01:14:1e:8c:79:87:1f:22:8c:fd:
         9e:85:5e:0b:99:56:a0:af:02:38:5a:46:76:f6:6f:62:a5:05:
         53:3f:b4:49:d1:10:8e:e6:74:60:34:e9:e5:70:61:20:7e:48:
         ca:61:8d:0a:45:5f:93:21:2d:f9:76:7c:c8:00:15:1f:32:65:
         5d:2e:76:8b:76:b3:29:65:63:e7:1a:e2:7d:5d:ff:96:92:bc:
         87:4d:fd:c3:19:6e:20:f3:6c:2d:86:7a:9b:d5:2a:c6:0d:2e:
         7d:52:18:4d:d7:61:53:51:f5:b8:a7:32:8a:f9:ca:ba:00:6e:
         14:e3:7d:01:be:e9:29:30:51:6a:ba:6b:c4:62:c4:6d:d9:a8:
         87:e1:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:43 2025 by rpki-client