Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/d8f42549-c0cf-3f6d-b725-0ad2f8054a60.roa
File:                     d8f42549-c0cf-3f6d-b725-0ad2f8054a60.roa (raw, json)
Hash identifier:          XJxB25NwdG1WBBrf+Zp9ABWeV/o8BmCQfCNNI01v2R4=
Subject key identifier:   B0:E0:36:0F:64:58:BF:DA:C0:2A:B2:80:75:28:00:48:B3:35:17:BD
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328584B2496CF8A2EBC40F4B5FEDB80
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/d8f42549-c0cf-3f6d-b725-0ad2f8054a60.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     394356
IP address blocks:        2602:fe62::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:cf:8a:2e:bc:40:f4:b5:fe:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=9f90e612-9e4d-4314-b1c4-6e68055fecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:2f:e7:53:b1:e7:2a:c5:d2:5b:53:c2:4d:
                    60:d9:a4:f3:0d:23:11:f3:41:30:a2:b7:58:8b:cf:
                    b2:63:7c:55:57:66:58:be:17:06:c3:71:35:9f:88:
                    80:a9:4e:67:4f:16:4d:95:09:1a:dd:44:f9:f6:db:
                    c4:48:51:4d:da:3f:7c:f4:a5:e3:c1:f8:56:5c:1c:
                    cc:af:ba:87:07:ae:d8:8a:4c:fc:9b:83:36:ef:3f:
                    68:37:da:75:44:a6:23:b2:d0:b6:ee:ef:54:c1:af:
                    b3:09:f3:19:3f:a9:22:a1:d8:97:af:a1:d6:ed:33:
                    7b:d3:1f:f5:18:9a:26:d0:d0:d6:2e:08:85:5d:9b:
                    90:6a:a7:27:32:ec:6a:63:e8:34:10:61:7b:bd:72:
                    09:5f:e3:99:02:4b:01:54:6a:bd:06:64:95:e2:2e:
                    0b:24:e6:c7:a1:44:7d:e6:e6:46:25:b8:3d:18:89:
                    5e:05:c8:32:d6:66:a7:f5:6c:e6:78:98:f1:15:85:
                    ac:71:b8:84:3c:87:97:90:04:68:6b:5e:13:29:6a:
                    bb:b4:34:c6:61:ba:96:22:af:b3:a1:cc:b9:8b:ad:
                    06:50:c0:17:04:db:64:f0:88:44:4f:48:bd:81:78:
                    d3:98:99:f9:fe:eb:34:ea:d9:3e:62:cb:70:19:a3:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:36:0F:64:58:BF:DA:C0:2A:B2:80:75:28:00:48:B3:35:17:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/d8f42549-c0cf-3f6d-b725-0ad2f8054a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe62::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:9b:a5:e3:de:ab:da:4c:4d:5a:f0:72:fa:b6:21:1c:cb:
         8f:af:4f:ef:39:fc:11:7c:ea:83:d8:3e:41:d6:65:e1:45:72:
         2f:a5:d2:7d:a7:9c:84:3e:55:38:5e:9c:0c:2d:92:94:f2:5e:
         ea:ce:a2:c1:66:f2:20:e0:99:f7:56:42:12:f9:70:99:7e:cb:
         23:82:c4:98:e4:fc:13:f1:1a:6e:db:7c:63:11:91:4d:41:a2:
         1b:d1:bd:f3:98:e4:0d:4d:95:e4:da:a6:82:47:3b:64:ce:8a:
         e7:5d:6c:78:67:93:03:cd:34:7c:fc:ed:3c:21:d6:5e:42:1b:
         c0:34:77:b6:ea:1c:f4:d3:27:92:04:50:6a:5c:85:e4:4b:74:
         88:67:6d:66:3b:23:aa:7f:04:1c:7c:e2:27:46:e9:e4:d2:fd:
         47:ea:63:52:69:52:7b:cd:59:8e:9d:01:75:60:31:84:04:d7:
         09:52:d8:a8:e7:ea:83:ab:b5:1c:46:09:68:31:fe:b5:72:80:
         0e:e8:ca:d1:ab:4b:04:e9:7b:29:f5:12:71:c4:b4:d2:a2:98:
         26:34:7c:bd:2f:8b:ce:d6:ae:1b:e9:57:e6:26:88:d8:06:8e:
         44:8e:e1:3f:76:07:98:ab:16:dc:7f:3f:32:72:50:49:97:c3:
         26:df:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:44:50 2025 by rpki-client