Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
File:                     428d2931-231b-33af-9119-4138e16c38af.roa (raw, json)
Hash identifier:          JNJ/YHVGxg8UduU3tpwxY8WyWIXPQ9wB0Oh1QltgpMk=
Subject key identifier:   9A:A9:67:9E:D9:2F:75:C9:C5:6A:10:86:93:9C:45:AE:2B:E0:6A:78
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584B4E770A49585B843198000CC0
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     399883
IP address blocks:        2602:fc06:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0a:49:58:5b:84:31:98:00:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=7502d674-4617-4ee4-bbbb-2795605b3f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a5:9e:fd:7f:71:dc:bb:e8:4c:8a:aa:90:2e:
                    62:b7:be:9b:2e:5d:42:cb:75:1b:06:eb:16:ae:d1:
                    57:c4:22:26:3c:ac:cf:b8:58:60:b1:d7:0d:97:25:
                    18:91:3a:93:e6:da:c6:d3:37:00:80:b3:fd:e9:da:
                    6a:ad:d4:a8:fc:e6:e5:47:71:a9:69:21:0b:db:3a:
                    0b:66:05:bc:a0:03:a5:92:73:62:36:97:33:b5:f3:
                    58:e5:17:2a:2d:51:db:7b:86:b0:3a:ca:fe:9c:7a:
                    bb:86:c9:f8:2f:09:ae:50:a7:57:6e:f9:66:f0:2d:
                    fd:30:54:45:87:54:1b:d2:80:75:80:59:56:38:a0:
                    0e:e7:61:0a:45:6b:cf:5a:ff:c8:c5:d1:8c:c3:99:
                    58:c1:be:bc:6e:99:bb:bf:27:ef:0a:4d:28:b8:b8:
                    91:7a:2d:4d:e5:d6:e7:f0:21:15:6e:00:96:d6:d7:
                    37:56:82:6c:2a:d8:6a:66:67:84:ae:df:10:a1:b4:
                    ed:b6:32:2a:c5:37:3d:16:a8:7f:a4:08:e3:f3:a1:
                    76:af:4b:9f:68:11:29:cc:c3:86:bb:68:a6:61:4b:
                    08:5a:ed:9d:4e:d4:4f:35:e8:00:57:e1:87:f6:c6:
                    f8:cf:61:69:fb:54:c2:02:31:1d:d6:85:80:5e:4e:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A9:67:9E:D9:2F:75:C9:C5:6A:10:86:93:9C:45:AE:2B:E0:6A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:10:11:f3:b2:69:fa:99:c2:d1:5d:a5:03:b4:96:3c:7e:
         bb:94:8b:64:e1:3c:c7:e4:52:dd:b2:ac:5e:27:52:eb:d3:3a:
         1b:b2:b8:4c:14:49:f9:16:56:93:08:68:33:fe:65:e0:cf:1d:
         ef:2b:ff:64:a1:6e:db:80:f8:87:d0:d4:5f:1e:09:c6:c0:98:
         54:41:bf:1d:39:af:7f:d3:d4:29:1e:85:74:83:4a:b8:8d:a8:
         9f:83:37:e1:76:90:b8:41:cc:df:0b:ee:1b:63:6b:29:8c:d5:
         88:99:c1:ca:8f:3b:0d:8e:7d:ac:1e:ee:21:c8:f8:e4:c0:cb:
         9c:82:57:ac:3c:18:b4:19:eb:e4:f6:ae:61:e0:ea:91:f3:cd:
         fb:ed:7a:ad:90:1e:bb:31:f1:9e:0a:71:f2:cb:18:cc:96:8b:
         88:62:90:5d:60:03:e6:e6:b8:ff:f7:3b:4a:33:c3:b3:9f:25:
         20:a4:15:92:67:4b:c6:a0:55:07:31:0a:e9:ac:75:6c:5c:a5:
         02:45:54:c8:aa:af:b1:4d:11:54:3b:ea:e1:a3:80:c8:d5:94:
         a1:e6:53:43:9f:f4:e1:18:bf:ab:c1:3c:98:5b:76:7a:a2:8f:
         1e:3c:93:ef:d0:fb:b0:30:be:f7:36:e9:d2:05:f6:bd:3a:77:
         f4:06:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:41 2025 by rpki-client