Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa
File:                     cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa (raw, json)
Hash identifier:          zOmB/1BFCTUMXDgwSyeFU6VhscepLKEkY0QEzMJ94mg=
Subject key identifier:   CA:8B:DD:90:07:79:BE:D4:AE:F4:E3:F1:C3:91:40:A5:FC:89:49:29
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584B434CAF31E9BDC902894EF0C0
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     401243
IP address blocks:        2602:2b5:26::/48 maxlen: 48
                          2602:2b5:27::/48 maxlen: 48
                          2602:2b5:28::/48 maxlen: 48
                          2602:2b5:29::/48 maxlen: 48
                          2602:2b5:2a::/48 maxlen: 48
                          2602:2b5:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:af:31:e9:bd:c9:02:89:4e:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=875d9d32-ea4f-445b-88c6-a3245e310b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:8d:69:8f:e1:69:d0:df:d1:4d:ab:4d:81:
                    a5:1e:47:8b:69:35:3f:53:7f:0c:bc:43:56:f7:9e:
                    f8:c1:99:2c:ed:dc:ce:a0:ec:45:5b:ec:e0:f1:3c:
                    a8:ef:b1:a1:0f:c4:8d:6d:d2:d2:2a:28:04:93:50:
                    45:c4:29:85:f1:53:ff:bc:a9:b2:e1:5e:9e:f7:9e:
                    26:69:70:3b:69:71:05:fb:df:79:f1:6d:93:d2:e2:
                    8c:21:05:e3:fa:9a:44:04:f1:cf:df:db:45:cc:b2:
                    34:95:70:d1:b3:f9:f5:7a:6d:24:4e:8e:31:99:85:
                    43:c9:f3:46:63:96:1b:99:f8:ce:65:76:cc:f1:5f:
                    c0:5b:87:72:8b:53:ce:af:49:f2:93:79:a4:e4:5a:
                    9c:08:46:54:5a:74:90:9d:d8:4b:a7:e4:47:c0:7d:
                    a3:a0:79:35:ff:97:80:18:c8:59:e2:b4:2e:bf:f1:
                    e4:f5:8e:f8:dd:86:e5:06:e1:cf:9f:bd:0a:77:e0:
                    83:53:18:af:62:a5:da:a4:30:0a:8a:55:a9:94:ad:
                    a5:59:ef:e4:ca:8a:2e:66:46:ae:fb:0b:50:80:a1:
                    b4:11:9e:12:4b:b1:52:9b:6b:92:69:88:4b:0a:b3:
                    54:41:bc:b0:42:d3:d7:53:d4:54:7f:f1:c4:a4:17:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8B:DD:90:07:79:BE:D4:AE:F4:E3:F1:C3:91:40:A5:FC:89:49:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/cdfabae3-27b2-355b-bcd0-aa4fcc64544b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:26::-2602:2b5:2b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:26:82:54:04:34:b9:3e:19:ed:43:90:7c:dc:58:f5:78:c1:
         94:6c:51:ab:85:eb:24:e6:2c:b2:8f:78:61:9d:df:6e:19:56:
         48:9e:fa:96:85:1f:76:7b:28:81:66:da:8a:16:25:30:d7:d4:
         7f:bf:10:77:78:36:63:8a:43:c3:19:09:fd:d2:7a:05:5b:ff:
         4f:ee:62:de:85:a8:c4:e6:7e:3c:99:59:43:b0:0d:59:20:9b:
         37:4e:4b:87:88:42:1a:c3:5d:fa:bc:41:15:88:fc:50:ba:c1:
         72:0b:bc:3d:0d:99:3c:6f:c2:dc:5f:d0:7c:70:5f:de:55:e8:
         d5:d9:da:d3:0d:cc:73:14:fd:f4:a6:34:41:f9:41:28:e0:5c:
         56:35:68:be:f3:64:0a:06:d5:f0:8c:37:9f:03:53:50:b5:d0:
         b5:f0:ba:ec:b3:56:18:75:32:a8:ee:ee:7e:d1:ae:14:e1:27:
         b3:a0:33:46:fc:6a:9c:dd:70:31:c4:7e:95:fa:6f:e0:07:a5:
         00:17:01:1b:e9:80:d7:bb:ce:f5:2a:05:92:98:41:83:c1:aa:
         75:11:50:7b:ae:96:93:91:fd:bc:d9:ce:33:dc:42:41:90:85:
         b0:0d:35:8e:42:4f:e5:60:35:24:35:7e:69:e9:30:05:0c:49:
         73:cb:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:19 2025 by rpki-client