Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
File:                     eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (raw, json)
Hash identifier:          qNcEBKfj15mncSGtvWyAHfTezgrG2+3nLDePwwA6+5k=
Subject key identifier:   87:C5:8F:F5:97:1E:25:A9:3E:12:69:B2:88:80:76:60:E0:D5:05:8A
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F4328584B79BCC5C414726E31EED89F00
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     26431
IP address blocks:        2602:f666:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c5:c4:14:72:6e:31:ee:d8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=655bd4b8-2dc6-4923-b4f8-c87492b85fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:64:12:7c:a9:51:3f:b8:a3:0a:07:3d:38:
                    94:f4:ca:1d:36:23:e2:9c:42:87:cc:66:31:3f:33:
                    69:8e:8d:e9:25:5c:5f:70:97:48:ee:2a:0a:77:e2:
                    6d:01:74:c4:8f:e6:45:da:12:69:b7:3d:9d:19:85:
                    3a:34:b3:c6:78:a9:2f:54:9a:a1:3d:87:05:1b:6d:
                    0b:5a:91:c1:1a:a3:e9:91:59:73:f2:8d:54:ca:6e:
                    16:bc:94:ad:45:41:f7:b3:ff:82:53:e3:22:f7:18:
                    c8:c1:e2:c2:6e:8f:23:ac:b1:5b:03:c8:58:16:30:
                    8c:ad:73:ef:10:7e:17:7e:e6:c6:2c:63:ec:56:79:
                    4a:95:78:3a:0a:c0:c3:d9:e7:26:4f:8a:cc:26:3b:
                    b3:55:66:c8:d9:1a:13:4e:27:34:bf:45:f2:4f:2f:
                    17:80:85:00:74:2c:7d:99:3a:b3:a7:63:15:51:36:
                    9e:ab:dc:fe:38:54:5e:fa:f2:bb:8d:23:de:b0:3c:
                    2a:62:98:ec:f4:17:3a:8c:78:23:0e:33:7d:81:a5:
                    90:12:66:20:cc:8d:0d:4c:23:35:4b:f0:84:19:3e:
                    cf:1e:a0:bb:9c:71:c1:43:4b:1e:86:13:24:5c:e3:
                    64:88:e0:1e:e8:bd:94:ea:4f:44:97:a5:bb:c9:dd:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:8F:F5:97:1E:25:A9:3E:12:69:B2:88:80:76:60:E0:D5:05:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f666:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1f:0e:15:df:d1:c6:61:51:a3:95:d2:11:de:8e:cc:96:70:
         26:39:b9:03:78:7a:38:8f:94:3c:4c:a4:32:16:53:06:03:6a:
         44:7a:59:c3:ae:3c:53:8f:c2:36:5c:66:f2:87:cf:a0:6e:70:
         c0:27:98:db:19:38:7d:29:37:4d:f3:b5:8f:c0:d2:bf:28:20:
         22:69:70:f5:de:5c:70:6d:2e:8e:c4:71:16:7c:31:8c:12:6f:
         08:9a:b8:be:05:3a:1d:85:7b:50:30:b2:ba:2c:df:27:13:9c:
         a7:06:04:db:a8:20:41:b5:dd:f0:ef:33:1a:76:88:5e:25:0e:
         bf:89:1b:5d:6b:05:45:5a:44:dd:17:59:10:a3:cf:7a:be:c7:
         44:96:b5:dc:a1:b9:d9:44:a3:73:6b:ea:56:92:91:ed:a2:8f:
         e5:d6:70:96:48:66:0e:22:f6:55:27:07:12:8a:68:03:16:ba:
         4a:99:1a:f8:82:90:75:cc:84:a8:b6:19:a4:fe:6f:6b:6d:d9:
         ee:7b:c4:85:d9:e6:1f:c4:06:ef:33:76:4a:be:88:62:9b:38:
         97:aa:52:b1:b4:8c:1b:76:9c:b0:e9:35:d7:f1:38:90:8a:8a:
         51:8c:38:ec:5b:a1:ba:2e:34:0f:4b:37:17:42:4e:95:a0:c0:
         6d:0f:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:57 2025 by rpki-client