Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
File:                     a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa (raw, json)
Hash identifier:          jN8tpE6b43QgxVH7JRlYiKjpZ8NAXbA22KIEIWZY3gs=
Subject key identifier:   D2:44:0C:64:F6:3F:DC:46:29:B6:83:52:37:A1:68:B8:A5:67:13:FD
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F4328584B6201ED3B6521A7CBE81C71DC
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     11721
IP address blocks:        2602:fa8a:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ed:3b:65:21:a7:cb:e8:1c:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=199f7dec-6d47-4d3a-8235-12582cf26e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:22:f9:90:04:10:96:9c:b5:01:6a:a9:f4:65:
                    64:3f:25:0d:79:bc:b0:9e:1d:db:42:3c:5a:ae:49:
                    65:c7:a5:97:f1:91:f7:ca:e0:13:b6:33:d2:6c:42:
                    ae:9b:f9:d0:42:2e:b3:3a:ab:12:af:f5:73:b8:e2:
                    ee:48:48:d2:4f:95:d1:30:cb:a1:c6:fc:16:b0:ad:
                    73:be:8e:ad:5a:e6:34:35:68:63:eb:20:17:1e:0f:
                    b1:39:13:99:ad:39:da:a1:92:86:24:65:35:65:73:
                    5b:aa:f1:00:b6:fc:9e:12:cb:2c:d1:53:dd:dc:db:
                    8a:69:7e:9e:f5:2a:0c:24:d8:1d:ad:f8:e6:a7:9d:
                    e9:f9:33:7b:d6:2f:0b:2c:d5:63:e0:01:da:3b:bd:
                    37:c5:8f:b0:21:fb:60:16:c8:1d:fa:5c:c1:76:8c:
                    ec:c6:35:9a:6c:91:c6:18:6a:75:09:71:b9:2a:b5:
                    9f:24:04:8f:99:ee:29:80:23:73:23:68:38:72:58:
                    52:e3:5f:b0:34:cc:a8:57:cf:b3:a1:63:ed:11:85:
                    77:5f:e3:f3:65:02:76:43:7e:99:62:6e:67:4d:4d:
                    8c:7b:1e:23:14:55:50:fa:d6:24:cb:90:26:a7:75:
                    b8:98:98:3c:95:f4:07:c8:42:cb:23:22:4a:66:e3:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:0C:64:F6:3F:DC:46:29:B6:83:52:37:A1:68:B8:A5:67:13:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/a78cd79d-d1db-3c24-8fe8-d025ed11b2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:b7:fe:62:33:19:6f:29:d7:46:35:cc:d1:c2:38:9d:67:
         76:51:f3:1a:e3:90:0a:5d:93:4f:2e:76:15:76:fc:46:4a:d9:
         37:f8:b4:34:1b:24:f8:19:a1:5c:ec:4a:49:d1:e1:c8:76:36:
         ea:11:6b:7d:2b:dc:ea:47:78:71:72:99:1f:ce:f1:79:dc:4b:
         1b:9c:a4:45:23:8a:db:1d:01:cd:28:dd:6e:2d:1d:17:45:07:
         7f:3c:b9:78:7f:1a:07:f7:1e:2b:f3:92:52:29:b3:f2:ed:fa:
         e1:54:6d:4a:28:d0:26:34:15:bb:9d:2b:18:94:d1:95:79:c3:
         e6:c8:63:5a:1c:bc:ca:4f:44:e7:fd:a3:8d:c0:1c:18:52:1a:
         83:29:7c:bc:34:30:bf:49:f1:7a:73:97:63:95:79:4e:1a:fc:
         15:4b:40:62:7c:2d:d8:0e:cc:57:9c:11:e7:97:5a:81:ce:ed:
         d9:67:a3:34:11:d6:61:6c:bd:36:dd:68:9b:0b:20:02:75:f3:
         bb:ef:61:6c:b0:41:c2:25:63:3e:f6:e7:05:03:57:67:4b:e1:
         cf:b8:1e:be:1d:fa:3a:61:86:05:15:ea:56:20:be:06:01:52:
         f3:bb:10:ec:03:f8:22:99:9c:15:a5:91:c3:24:7d:01:67:c2:
         08:cb:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:22 2025 by rpki-client