Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
File:                     c4e6a5d6-57dc-34dd-b317-934395b218db.roa (raw, json)
Hash identifier:          ohPh0VCBIwCxkK8TTCBUJreICYCx3a8O8PJ6dLxPkzY=
Subject key identifier:   A8:C2:18:D0:FD:9E:66:14:76:33:11:CC:56:D4:82:93:A1:D3:1D:56
Certificate issuer:       /CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Certificate serial:       010D0C9F4328584B80B76F925F53F88D76294CA0
Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1030
IP address blocks:        2602:f9d4::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6f:92:5f:53:f8:8d:76:29:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=0417e410-c608-4192-8454-477420a704f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:88:b5:ea:eb:8a:32:07:63:56:90:4f:83:
                    dd:53:9e:12:f1:e5:63:09:24:29:f4:ae:90:9e:31:
                    8f:60:58:51:e4:d0:5f:3f:4e:d0:7b:1e:b7:10:75:
                    9f:3c:d0:56:dc:56:02:d7:87:80:ff:24:a1:0e:00:
                    c9:e3:c1:b0:ae:14:87:4c:a5:0d:4a:2d:8c:8b:31:
                    88:b5:6a:d8:2e:c2:c8:05:eb:e6:f9:df:df:3f:f2:
                    d4:2b:86:ab:7c:1a:7e:3d:05:93:8f:71:c5:1f:49:
                    37:e8:d4:34:75:a6:c7:4e:b3:12:d5:8a:ce:2e:5f:
                    69:47:be:1e:21:9e:61:02:77:0a:bc:3a:8a:81:3f:
                    81:a4:66:9a:6d:eb:ef:a1:d2:56:3e:12:b3:64:81:
                    24:58:77:0f:8d:28:c7:da:01:74:38:e4:75:c7:d1:
                    67:07:d7:c7:fb:8b:5b:a5:80:7d:a9:b3:5d:ee:60:
                    f7:5d:94:cd:56:d1:47:13:a8:e6:8e:db:4d:0f:f6:
                    b4:0a:64:f0:dd:67:84:1f:31:60:15:e4:f8:14:85:
                    be:23:d7:c8:62:01:32:36:9a:30:e0:15:bd:fb:23:
                    e7:70:1c:b0:b5:73:a7:54:62:07:02:fd:05:73:14:
                    54:fb:18:29:74:1e:4b:f9:ef:18:3c:8f:b9:a8:dc:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C2:18:D0:FD:9E:66:14:76:33:11:CC:56:D4:82:93:A1:D3:1D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:af:44:44:f0:92:58:11:f6:b8:06:c9:b5:ac:89:70:38:db:
         a3:5c:a2:b7:ff:3c:7b:47:cb:69:df:79:47:55:2b:ed:94:ff:
         dc:e2:c1:5f:86:10:51:fd:00:92:ce:ea:14:ca:08:5f:89:16:
         ad:f6:38:37:db:43:55:ba:8f:d4:4a:f3:1f:86:1a:44:69:f3:
         d7:63:e5:d4:2b:99:71:5d:6e:ab:d3:86:5e:b0:39:e1:60:cc:
         ef:09:6b:a8:21:e5:48:b1:66:7d:aa:39:f0:e9:fd:8a:60:f9:
         f9:61:a2:2b:33:28:77:64:44:da:f5:8e:a3:45:80:72:9f:5d:
         6c:2c:d1:4f:28:46:a3:fe:81:d9:75:bf:02:24:02:59:05:31:
         7e:dd:fc:06:8f:7f:00:ab:aa:75:62:37:3e:aa:37:0f:19:cd:
         76:a1:94:7a:83:7f:f4:d0:6c:23:c0:b4:4e:c0:a6:4d:dd:fc:
         ad:47:41:3f:c2:69:5c:96:91:88:f5:5b:a2:80:58:d5:26:20:
         03:37:5e:45:a4:eb:29:0d:b5:b4:e8:d8:ed:ba:bd:02:d8:56:
         cc:10:5a:c7:84:25:20:ce:11:68:d2:99:06:76:18:74:f4:34:
         72:cf:5e:df:ab:05:55:49:ac:9e:11:56:5b:1f:ac:74:43:e1:
         05:81:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:06 2025 by rpki-client