Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa
File:                     abbd1e78-c1e1-3450-8643-52bcf78ea077.roa (raw, json)
Hash identifier:          7Aq96XcDMb8iXZRx6KHza7e6PSZ18nHByrjHruryWnc=
Subject key identifier:   51:19:F0:ED:E5:66:AD:69:19:45:D3:E6:D9:51:99:2E:E9:16:69:4E
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584ADA9BBE9689E454BA546FB200
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     27385
IP address blocks:        2602:fdaa:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:be:96:89:e4:54:ba:54:6f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=fa87b9d5-6b7f-4a5d-ad4e-6e579d59a2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:dd:f7:4b:23:09:e8:30:68:eb:e4:cb:11:
                    7a:73:d4:c6:77:c6:f3:f3:43:d2:c0:3d:82:a7:4c:
                    7d:a4:77:fa:7e:9a:e0:47:6d:c5:25:35:e4:d9:5f:
                    6c:97:82:c6:9d:75:4b:da:f0:79:fc:3e:f5:6b:6a:
                    a2:c9:b4:5b:02:55:32:90:a1:d2:41:59:5d:e9:36:
                    f9:98:f9:80:5d:e2:11:90:ff:c2:f6:23:66:2c:be:
                    2f:13:3d:c8:d2:0d:17:07:cc:a1:c1:03:32:c7:87:
                    8f:12:71:39:ce:11:75:59:89:81:f0:35:c0:82:f1:
                    37:e2:3a:31:1e:5b:c1:75:49:17:f9:3f:2b:44:22:
                    8c:66:3b:03:1b:a4:30:b9:b0:b5:81:58:3d:17:2b:
                    12:cf:43:44:49:c1:d6:59:9d:fe:18:8d:a8:8e:53:
                    39:f5:4b:b5:25:8c:e3:d0:54:04:5a:68:33:e9:8a:
                    62:8d:49:fe:0d:8c:6b:43:fb:16:7f:74:8d:b6:6f:
                    57:3c:83:37:66:0f:7a:a4:12:5d:f1:d9:01:96:cb:
                    39:67:f3:8c:15:c7:1e:8d:be:57:60:2e:a8:60:ae:
                    5e:0b:49:ac:1b:f2:af:3c:9b:d4:2d:c5:8e:66:d1:
                    7d:d1:62:b5:89:1c:d6:47:26:df:20:04:12:92:f9:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:F0:ED:E5:66:AD:69:19:45:D3:E6:D9:51:99:2E:E9:16:69:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5f:b0:7f:c7:a8:6c:a5:05:0a:7b:0d:83:7f:ef:f5:53:e4:
         70:fb:9d:25:23:dc:44:bd:53:2a:0a:a7:55:4b:80:eb:5d:3e:
         88:59:aa:f6:2c:a0:6c:cc:86:89:c1:d7:14:5a:b2:a4:5b:c7:
         d0:16:a9:1b:11:8d:94:20:9e:44:89:1c:13:f7:46:41:ff:bd:
         af:91:7e:a5:05:f8:1d:5a:60:aa:bd:22:a3:ee:17:65:bd:5f:
         01:28:db:2b:c3:1d:51:7d:b3:62:b0:90:26:91:12:c8:f0:51:
         69:87:03:71:32:c5:8e:12:dd:83:6d:f2:2d:ff:ad:6a:4d:e0:
         6e:55:4e:78:23:67:d7:b8:07:ce:9e:e8:47:00:ee:47:03:a5:
         a1:7f:21:f4:45:1c:db:0e:86:58:5c:a4:d0:25:42:00:88:6f:
         bc:35:7b:0d:94:10:97:1e:ca:70:39:9f:6e:9f:6b:8a:39:fb:
         70:c7:12:92:a6:0a:92:c8:3e:9e:27:5b:79:cf:4c:bc:cb:ac:
         2c:c0:9d:73:18:80:e8:f6:93:78:f3:2a:53:90:b8:5b:3b:d6:
         12:bb:7b:d1:1a:2b:4a:85:37:92:04:19:fd:ce:b9:9e:76:32:
         1d:4d:1f:8b:0f:37:31:fa:c9:47:85:a3:c4:fc:02:bf:32:d7:
         f7:93:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:28 2025 by rpki-client