Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/a5d739f7-4b49-39f9-a01a-574ba88c199b.roa
File:                     a5d739f7-4b49-39f9-a01a-574ba88c199b.roa (raw, json)
Hash identifier:          UWutXJRzPMfecGfPn3e66AvL0h52SkUJiwilIAWgjVU=
Subject key identifier:   EE:A7:CB:9A:AA:61:FE:10:56:8B:F8:6C:34:AC:80:3B:A2:CC:C9:C9
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584B89081F6CF2CC6A282673B8C0
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/a5d739f7-4b49-39f9-a01a-574ba88c199b.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     398493
IP address blocks:        2602:fd37:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:08:1f:6c:f2:cc:6a:28:26:73:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=a14c82b0-93df-47fb-a857-a4c3033c8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:40:b5:98:5d:dd:4e:63:df:63:38:86:79:
                    37:ae:6a:59:b1:2f:32:62:10:da:5d:8e:2d:ab:b7:
                    93:01:40:45:51:4e:c2:eb:23:3f:04:f2:ad:9f:4c:
                    ad:b1:7a:97:ff:c4:7e:e1:fd:01:dd:1e:81:59:54:
                    c8:d2:71:8a:b3:f0:b0:59:55:76:44:da:37:c6:7e:
                    7c:5b:36:85:ea:34:7b:00:fd:b6:c7:68:93:5f:b3:
                    f2:a6:f3:43:23:80:09:75:8e:a8:65:d4:de:eb:af:
                    45:52:95:b8:6b:02:f1:d5:f4:a2:52:ff:c8:35:56:
                    09:dd:2e:30:98:30:15:3f:70:5c:90:db:a9:7d:fd:
                    f4:83:2f:2e:f2:ef:04:2f:84:23:92:db:bc:18:4e:
                    b6:2f:81:a8:21:de:46:7d:9d:45:9e:15:7d:90:d8:
                    df:aa:da:2b:a6:94:a1:6b:b2:1f:70:27:b1:1b:cd:
                    79:58:b7:d4:a0:2a:29:e5:58:ce:4d:12:da:8f:fe:
                    db:02:da:d3:cc:f7:b0:46:bf:e4:50:b8:c9:e8:85:
                    6b:eb:cb:ac:29:c7:e6:44:d9:c2:f4:b1:19:d9:00:
                    72:16:bf:69:e2:3d:77:6b:1b:ed:80:b0:a6:5e:81:
                    d3:d5:8c:27:64:0c:05:c8:a9:e8:ec:4a:68:fc:a7:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:CB:9A:AA:61:FE:10:56:8B:F8:6C:34:AC:80:3B:A2:CC:C9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/a5d739f7-4b49-39f9-a01a-574ba88c199b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:43:07:48:68:f6:5a:cd:41:b8:ba:53:97:da:cd:7e:a3:
         21:dc:44:b4:02:ed:cc:26:48:df:11:64:69:77:b4:63:46:87:
         c9:4c:9b:88:82:17:87:1d:89:a8:36:32:0e:ac:95:86:fe:42:
         c6:65:a4:1a:93:02:5a:c0:3f:1d:60:81:73:00:f9:fe:80:7d:
         08:b4:02:7c:01:98:06:63:82:2a:09:0a:85:a2:3a:bd:e0:2a:
         a3:d1:10:bf:d4:d5:01:4f:e0:d1:18:b8:b0:f4:c0:f9:3d:b7:
         a4:54:62:d4:62:63:ef:80:90:79:ff:15:75:fe:f2:e1:4b:f3:
         c6:64:fd:e4:93:e3:d4:7c:50:ee:b0:50:65:57:9b:1f:55:69:
         8d:f8:4e:23:a3:83:e0:5d:61:41:30:31:d8:6f:97:63:7b:93:
         9e:ac:58:6e:9b:be:75:5c:11:ba:a3:e0:9e:68:30:41:1f:26:
         62:1b:12:f7:36:13:61:b9:cb:f0:ef:02:d8:da:86:68:a8:84:
         c6:47:7a:2d:89:1d:65:2f:8b:49:3d:85:c3:ac:0a:d6:1d:d6:
         f1:b0:e4:fd:cd:68:28:13:2e:8a:f7:bd:c1:91:25:52:81:f2:
         75:60:c9:96:2b:26:74:8b:f3:c0:70:50:e5:f7:96:a6:b0:a5:
         19:73:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:18 2025 by rpki-client