Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          gyylpdy8slW5w2sc6Ifum1O6hiOwjqRURK9II1wRk/k=
Subject key identifier:   75:83:6B:46:48:D3:ED:51:C3:EB:2B:4A:2F:6D:00:83:DD:BD:E0:46
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584B8BE22E053756221647862100
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:2e:05:37:56:22:16:47:86:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=9b660afd-f5a7-44d3-a254-06ca60110a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:62:61:50:9b:f2:d8:f7:6b:07:21:32:48:
                    6b:e1:c9:71:54:90:13:ac:e1:ec:50:2c:46:1d:3f:
                    b8:80:c9:84:de:04:6b:27:3c:06:81:63:89:4e:75:
                    c0:e7:31:71:63:4b:70:47:95:76:f9:be:b3:61:9b:
                    22:1d:f4:a9:08:40:6f:13:6d:73:c1:04:9b:07:80:
                    8f:d2:aa:06:5a:b6:40:b4:72:c9:2a:9c:a4:05:ba:
                    97:8f:3b:80:b0:ec:2d:02:6b:e5:0c:6b:50:93:45:
                    7d:ee:d6:14:bd:74:f3:3a:86:7d:c3:4d:c7:63:2d:
                    cd:1a:80:9c:35:14:50:6e:9b:63:bf:dd:14:e4:d0:
                    8f:a5:b4:20:b2:b0:8c:a3:a5:d3:6a:c3:c5:97:c1:
                    13:0d:66:40:05:97:b3:51:fd:2c:b7:7e:37:a6:31:
                    c8:83:e2:ef:6c:63:50:5a:1f:d9:bf:af:88:d7:2e:
                    b0:c9:64:ab:55:17:59:90:39:bb:55:45:02:8b:a0:
                    b0:ee:71:ac:53:3a:fa:db:57:3b:40:97:72:40:4c:
                    74:66:c1:1d:fe:b1:51:1c:2a:e4:06:99:54:0a:ee:
                    fd:23:7d:86:e9:18:30:2d:6f:f8:ef:21:e3:9f:64:
                    b0:f0:6c:97:8c:ab:ac:ab:3e:71:1a:01:ca:3c:20:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:83:6B:46:48:D3:ED:51:C3:EB:2B:4A:2F:6D:00:83:DD:BD:E0:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:c0:cd:0f:51:0a:c2:a2:2c:e7:3f:e8:2d:13:b6:c5:c0:
         39:13:ff:e6:80:ca:12:1e:0e:8d:ec:cb:df:4c:b5:82:80:cf:
         ff:a8:72:2c:a2:05:f3:d6:46:c7:5b:50:bd:dd:d2:d2:1b:6a:
         d9:d3:14:ac:e9:2a:85:68:05:3b:6f:4b:fc:01:37:96:74:0c:
         cb:f9:24:56:ee:52:da:6e:e5:d7:33:80:22:63:26:03:36:f8:
         95:c1:1b:eb:7d:5e:23:13:43:dd:27:60:8d:e7:90:c7:6a:c1:
         9c:d9:91:9b:af:55:a6:7a:09:0b:a0:9b:4d:98:bd:0b:87:7f:
         4c:e3:54:4d:da:36:54:a3:ff:11:32:f5:f2:d6:53:7a:6e:1c:
         34:eb:59:80:04:da:d2:a6:5d:75:62:04:33:c4:9d:9f:88:c0:
         44:16:b7:86:0d:e3:26:7d:9d:81:64:c4:2d:b6:04:bf:e3:47:
         a2:17:a7:ce:4d:5e:b9:97:35:2b:77:4c:16:c4:15:96:c0:33:
         1d:5e:4d:97:d3:59:2c:d1:8d:ad:63:d7:1a:71:91:a0:35:d7:
         54:6a:55:be:ee:47:69:9e:da:8e:83:ac:b2:eb:52:f3:4e:b9:
         31:0a:3a:61:fd:b4:b7:4f:f1:ec:84:2a:b4:47:3f:01:50:69:
         3b:c7:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:04 2025 by rpki-client