Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
File:                     d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa (raw, json)
Hash identifier:          UFwMM2CBLnZPSG2uZCOU+DTRrZV2BYY4ADoILW5a3cQ=
Subject key identifier:   7E:93:9D:23:17:48:1F:B9:40:14:45:D7:59:0D:04:75:85:75:C5:E5
Certificate issuer:       /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
Certificate serial:       010D0C9F4328584B48E1B05D61E28EF6682F5200
Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     54429
IP address blocks:        2602:fd94::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b0:5d:61:e2:8e:f6:68:2f:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=ffc43aa9-e7db-4994-b254-631db00a4df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:ab:f6:72:b6:3f:83:0d:9d:32:16:62:7e:
                    ee:a3:14:78:5c:83:d5:d2:e5:52:11:ce:08:66:d1:
                    b6:6c:98:1c:6e:3c:0a:45:e7:ed:ec:2e:21:57:0b:
                    b5:8e:3f:88:ae:2d:ca:b1:15:99:f2:44:3b:3b:2f:
                    d7:b7:83:ba:2f:fe:5c:43:af:0b:c5:bc:37:a7:96:
                    f3:6b:1f:94:36:e7:97:03:99:9a:71:be:02:e9:05:
                    41:6b:f4:5c:67:10:d4:85:73:18:97:5e:fe:12:91:
                    fc:9a:d8:f1:c7:ae:d4:79:13:a6:d4:8f:f4:a9:dc:
                    2e:a6:3f:50:58:d6:12:16:24:2d:b3:94:f0:6e:a8:
                    98:95:0b:90:92:e7:af:af:42:17:9d:1e:ca:6e:f0:
                    fd:89:3c:7d:7e:a3:39:e3:fe:3c:ab:1a:71:a4:ae:
                    75:33:33:77:ce:00:8b:5c:a3:70:06:39:7a:3e:12:
                    2f:6d:e1:1c:ca:53:06:5f:a8:ba:ac:93:37:e1:91:
                    6d:d2:7f:59:d5:3e:35:de:8a:ee:e3:fe:93:3d:b0:
                    03:2d:dd:68:6d:be:e6:0e:b4:2b:64:b3:86:87:42:
                    b2:a1:28:7b:5b:70:c7:3f:a5:e5:3b:8b:5e:76:97:
                    da:67:78:8e:54:63:09:bf:8b:35:fd:5a:77:2d:8c:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:9D:23:17:48:1F:B9:40:14:45:D7:59:0D:04:75:85:75:C5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl

            X509v3 Authority Key Identifier:
                keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd94::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1c:4e:7e:4c:ad:d0:06:ac:8b:c4:c7:23:fc:c9:1c:45:a1:
         08:41:d7:ee:2b:51:aa:09:81:58:26:82:47:77:fc:3d:99:26:
         48:7a:53:c8:89:d7:95:ae:03:35:31:7e:19:46:ef:98:4b:eb:
         1b:85:bf:29:27:eb:56:b8:4d:ab:5a:4b:ae:7e:fd:96:70:85:
         18:a2:21:f4:60:ad:10:bf:d1:f6:37:99:83:3e:8f:57:0f:0c:
         5e:8b:65:2e:ce:6c:42:66:16:91:d0:09:2c:64:53:af:09:85:
         59:1c:ef:a1:99:3f:17:6c:fb:c7:a3:57:51:ca:ed:51:62:cc:
         38:53:82:34:f4:37:e3:26:78:80:87:86:9d:bd:ea:0e:46:0d:
         ca:e3:d6:55:ed:b7:63:6f:5d:c1:c3:b1:86:0c:19:68:88:87:
         01:64:11:88:86:f1:28:8b:67:7a:d9:bf:dd:97:7d:09:37:51:
         f1:b1:2f:8b:e0:90:b2:69:7d:e6:be:7d:08:88:36:9c:ce:45:
         df:86:79:5d:0a:c9:34:a9:d6:a0:3b:b0:eb:3d:40:b2:2d:c1:
         99:6a:91:af:de:50:02:3e:d5:d5:00:5c:c2:27:d9:d8:1c:8f:
         51:bb:5f:b3:02:61:ba:7e:cd:04:67:df:f3:8e:90:c7:94:97:
         ea:89:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:08:01 2025 by rpki-client