Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
File:                     2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa (raw, json)
Hash identifier:          h4Z/qBiwKnv37gUoX6iK/56DGACR/Uy6R9TfO66thtQ=
Subject key identifier:   08:61:A6:92:BA:CC:81:BB:38:71:E8:24:40:AB:D3:76:13:1C:EF:36
Certificate issuer:       /CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
Certificate serial:       010D0C9F4328584B8EACDB279FE0381232EDF2F4
Authority key identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14224
IP address blocks:        2600:7d00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:db:27:9f:e0:38:12:32:ed:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=b943ab6b-e177-42ab-aafa-29f0e12390b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:16:56:8d:c0:65:72:59:57:fe:c1:a4:1b:
                    46:96:56:aa:cc:2e:ac:77:54:20:5a:63:c8:b7:56:
                    bf:96:00:4a:e2:cb:c8:11:26:15:93:72:c7:b2:71:
                    2d:7b:0c:fd:64:5f:84:14:09:cd:36:76:0e:af:4c:
                    fd:63:8f:02:d2:a3:b5:87:dc:e6:10:a0:63:0a:46:
                    83:05:a6:ed:86:be:77:ff:a4:51:99:99:e8:0c:3b:
                    e4:f7:4f:3c:c4:8d:40:fe:d9:16:4a:27:e9:73:07:
                    90:89:02:4a:c9:83:38:14:b4:da:97:47:29:82:2a:
                    20:c9:21:ec:9a:76:12:70:b9:e0:42:09:91:3f:77:
                    44:00:c1:ef:7f:75:11:b4:c2:38:18:ea:0d:00:70:
                    87:0c:e9:87:f4:70:08:00:ce:cb:d5:1e:b2:6a:59:
                    8c:ce:05:f9:bf:84:a3:67:69:de:0c:dc:0a:f3:44:
                    40:08:f5:3a:00:6b:7f:76:fa:c7:de:47:ae:6b:39:
                    e5:b6:82:80:8f:8c:dd:58:1b:76:f7:3a:85:fd:8a:
                    cf:5e:53:60:c8:14:41:d9:09:38:cd:8b:d6:4d:57:
                    0c:e6:0f:99:2b:ed:b7:bd:06:15:0d:f7:64:92:90:
                    12:de:b1:cb:41:b7:bb:7c:aa:a8:67:d5:6d:c2:28:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:A6:92:BA:CC:81:BB:38:71:E8:24:40:AB:D3:76:13:1C:EF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl

            X509v3 Authority Key Identifier:
                keyid:4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:70:ed:4c:3d:d8:7b:b7:fd:ee:c6:e9:66:50:39:25:7b:
         8c:5b:45:ea:2d:c5:f1:c2:b3:f4:d5:ba:59:cd:e1:cd:66:a7:
         47:40:5c:8b:78:47:4d:a9:00:88:d3:90:cb:9b:0b:be:cc:34:
         d3:fd:17:37:67:92:d5:8e:82:17:fc:ea:c6:61:d4:c6:fb:d8:
         e9:39:c7:2a:23:cd:d5:8e:e6:0c:5e:82:f7:2a:51:a6:ea:95:
         4b:ff:95:f7:7c:a6:c6:38:f5:48:27:d4:cd:38:11:eb:ca:fa:
         b7:07:5c:7f:a3:af:a4:60:81:3c:71:3b:a4:98:f5:c5:01:7d:
         98:5b:bb:91:d5:25:45:dd:ee:7f:5c:62:a0:c3:28:28:b1:c7:
         2e:b3:a2:77:71:7f:d4:cf:67:ea:33:5b:a5:c1:d1:de:fb:5b:
         28:fc:be:e3:dd:0d:17:2b:83:9f:00:bf:b9:83:e5:f3:12:b5:
         33:6a:f2:48:3b:58:d5:5b:df:5c:7b:86:a7:58:7b:c7:5a:46:
         bf:90:11:93:48:10:02:7c:e1:ea:85:59:27:4d:0b:bd:d3:f7:
         0c:0f:8f:6d:5f:ec:e4:1a:cf:b1:4a:4b:1a:50:14:9c:0d:20:
         b3:5a:3d:d0:e7:0a:0f:8f:8d:1f:1f:8e:42:df:39:97:2f:18:
         ad:5e:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:42:13 2025 by rpki-client