Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/a28ea774-a22d-35c8-973e-04bac28d8c7c.roa
File:                     a28ea774-a22d-35c8-973e-04bac28d8c7c.roa (raw, json)
Hash identifier:          EplnYw1SPaGWy00ST/O+PEQ9D4SUq9Tu7MXF3pHBCvY=
Subject key identifier:   DF:E1:5D:14:00:8E:A4:8C:2D:B4:91:07:EE:3E:EC:30:C8:BD:5F:03
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F4328584B486A308424EFB9DAF5954D00
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/a28ea774-a22d-35c8-973e-04bac28d8c7c.roa
Signing time:             Mon 22 Sep 2025 20:59:52 +0000
ROA not before:           Mon 22 Sep 2025 20:59:52 +0000
ROA not after:            Sun 21 Dec 2025 21:59:52 +0000
asID:                     64249
IP address blocks:        2602:fabc::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:6a:30:84:24:ef:b9:da:f5:95:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Sep 22 20:59:52 2025 GMT
            Not After : Dec 21 21:59:52 2025 GMT
        Subject: CN=89bd8463-c987-4f03-8960-3dbc591664a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:a1:6d:c3:16:05:4b:64:2d:e9:68:a2:61:
                    50:1f:43:ef:4b:64:ce:12:4c:2f:31:58:03:8a:b3:
                    fe:0c:18:f1:28:29:c1:8e:5f:0b:3e:05:0a:73:f5:
                    fe:3f:24:5f:ed:92:d3:b5:dc:cb:7a:f9:2a:cd:32:
                    dc:23:f4:3d:04:b5:a3:9f:3e:50:c9:06:ed:69:a4:
                    16:24:b9:51:28:c9:0e:38:42:70:61:79:81:23:90:
                    c8:02:18:1c:46:0a:3c:15:80:3e:35:d4:92:a3:a9:
                    03:b2:58:95:4d:c8:86:58:73:33:73:35:26:c3:fd:
                    bc:11:51:e1:ef:db:37:1b:a9:ca:e7:ce:2e:9b:6d:
                    de:f2:2d:a4:96:30:9a:52:87:de:b4:a8:7d:33:69:
                    cf:64:35:60:ce:87:af:5c:a2:50:e3:08:98:dc:dd:
                    e8:47:f7:ca:31:e2:c4:a5:92:46:f6:46:79:52:d5:
                    20:f1:29:7d:44:f1:08:02:c5:9a:c7:a5:db:aa:21:
                    15:43:a9:9c:07:d4:1c:2d:c6:86:38:9a:5e:15:64:
                    57:a6:87:94:a1:54:47:0f:f2:6d:9b:9b:99:1e:17:
                    92:b6:e5:47:ed:00:12:a7:d0:20:c6:fa:a1:c4:d9:
                    ee:9c:21:55:fe:9f:09:b6:2c:e4:ed:94:2e:31:ea:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:5D:14:00:8E:A4:8C:2D:B4:91:07:EE:3E:EC:30:C8:BD:5F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/a28ea774-a22d-35c8-973e-04bac28d8c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fabc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:34:69:3b:bf:40:81:db:25:a1:38:37:01:98:25:bc:21:ec:
         83:ba:4c:6a:35:01:c7:98:8a:48:bc:52:44:ab:c4:58:f7:a9:
         dd:55:aa:b7:25:f4:03:b3:52:a9:b4:17:6c:c3:32:32:a9:63:
         c3:71:ed:a0:f7:f8:3a:4f:3c:10:c6:fa:4a:a6:30:c3:d5:71:
         72:ca:aa:00:eb:7d:d9:19:86:8b:af:cc:4a:b1:9f:90:c5:23:
         fb:1c:2d:60:3f:50:b3:1d:5f:46:c2:d8:8b:bc:94:b4:89:55:
         6e:fd:05:e1:68:ca:67:37:8c:80:38:31:0d:a4:f3:ce:98:ba:
         d8:fd:e2:ed:bd:5a:27:d3:5a:29:cc:be:21:99:ed:de:38:64:
         64:12:24:ba:6c:9a:cb:7e:6c:a4:60:db:6c:89:55:64:7c:30:
         5e:0e:2b:9b:a4:a1:8d:59:ee:42:0a:dd:f0:b3:10:56:a0:94:
         36:94:c8:1b:73:b9:24:d9:6e:3c:81:88:ec:a5:fe:19:fb:b1:
         fe:9f:11:58:bb:b1:9f:2f:a1:e1:94:39:8a:42:35:45:4c:46:
         4d:6c:7c:d1:d4:8d:df:b5:4d:7a:e2:60:6b:3a:03:8a:e4:94:
         08:fd:72:f2:ee:fa:e2:b6:75:f2:fb:fc:fa:73:db:15:6e:a0:
         5f:42:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:05 2025 by rpki-client