Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa
File:                     198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa (raw, json)
Hash identifier:          7YjEeCRdQQmkN/HLmorlRRG1ek63GlpcFpB1RbtN3SU=
Subject key identifier:   09:25:38:AC:41:D7:DD:1B:2B:D1:7C:24:4B:FB:7A:89:66:34:E3:DA
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F4328584B38219D879751AA468C919844
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     14694
IP address blocks:        2602:fa5c::/41 maxlen: 48
                          2602:fa5c:80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9d:87:97:51:aa:46:8c:91:98:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=b288a3b4-31c6-4daf-91d5-c1ae11b23728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:92:d8:a1:bc:77:80:87:fe:72:4f:1d:3f:
                    c7:05:c1:16:52:6e:db:c1:fb:65:f3:31:72:3e:d0:
                    ff:c3:1c:f1:ad:7d:c7:4e:d5:56:25:e9:21:a7:fc:
                    7f:ae:e9:e0:9e:9c:6f:2d:3e:ef:7b:dc:30:a7:15:
                    6f:ab:e7:63:b5:0b:b1:76:06:6a:e9:c0:3b:ef:c7:
                    f9:75:d7:fd:e9:71:91:60:68:ae:75:fa:79:d5:a2:
                    33:c7:46:7c:34:31:49:a0:0c:dd:92:05:10:e9:9f:
                    15:48:63:67:7a:4d:87:f6:cc:7a:cf:d8:a5:52:94:
                    45:a7:85:21:c0:34:7c:06:22:3f:f6:07:72:ad:1f:
                    95:f9:89:90:7a:b1:f0:62:7f:2e:fa:e9:07:9e:b2:
                    fc:ad:2a:01:12:1d:64:59:c4:4e:34:8b:40:04:39:
                    6d:b3:be:c2:f1:60:a1:f3:7b:f0:f8:96:40:64:b7:
                    84:23:af:b5:ed:36:cc:e8:52:d3:bc:a4:07:45:eb:
                    8a:3e:a9:bc:29:1a:e0:38:b7:5a:b5:46:a7:ff:73:
                    5b:0c:74:1a:06:8f:2f:98:25:c9:14:81:02:04:4e:
                    93:9d:02:80:fb:47:99:2f:ef:a9:ad:ef:65:49:85:
                    ec:4d:26:cd:69:a8:98:1c:73:ca:54:df:00:84:15:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:38:AC:41:D7:DD:1B:2B:D1:7C:24:4B:FB:7A:89:66:34:E3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/198a9e65-2615-3b6d-8693-9d7ec9b7fd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa5c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:90:24:37:d3:32:28:6b:70:c5:2e:93:73:18:57:53:df:
         fb:21:2c:87:a9:d3:72:68:f3:d1:f8:82:74:4c:0b:40:6e:92:
         a8:28:53:b9:29:de:7d:8b:fe:c5:c4:67:4a:cb:d9:e3:4c:d4:
         00:5f:b2:bd:ea:16:27:4b:be:7e:fc:0e:78:88:95:75:65:15:
         61:cf:9b:fb:6f:2e:ff:ed:c1:b6:9a:cb:ca:08:46:37:40:77:
         0c:e2:b3:e2:2a:87:77:4b:44:a2:ae:81:72:16:81:39:fb:88:
         3f:7c:f0:d1:ed:a9:72:a7:52:1b:29:d4:a9:f9:7a:76:98:11:
         db:e8:57:29:14:74:a5:81:f0:9d:bc:32:cd:56:87:55:b2:62:
         eb:ea:74:fd:ba:bd:46:35:79:e3:ed:f5:1e:3d:27:16:ad:ad:
         ff:bc:e8:59:26:e5:1f:d5:94:97:6d:ce:8f:b1:7d:8f:a6:7a:
         91:ab:43:35:6e:c2:ca:f0:6f:5c:6d:f2:06:67:23:77:a1:f8:
         cc:36:d5:38:f5:21:64:53:9f:57:14:e0:d8:da:e6:15:67:fe:
         e5:91:e2:fa:d5:13:4b:22:f9:01:4a:5a:9c:35:9d:4b:21:07:
         36:69:15:5d:aa:24:c4:26:f2:dd:36:4a:89:cc:12:46:94:67:
         49:78:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:01:38 2025 by rpki-client