Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa
File:                     678c9af5-e375-344d-99f6-39e192dcba5d.roa (raw, json)
Hash identifier:          PnJiKVrZOkKMfugPjqXcNCDZoPUFGwhjn4W+UR27nfg=
Subject key identifier:   7E:38:56:89:39:27:50:FD:9F:A8:DD:BC:0D:1A:97:07:AC:92:F9:40
Certificate issuer:       /CN=e95630a3-5da1-408c-891c-268d2b4791c7
Certificate serial:       010D0C9F4328584B7F5261338ABBF2363C2FCFF8
Authority key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     401380
IP address blocks:        2602:f7e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:61:33:8a:bb:f2:36:3c:2f:cf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95630a3-5da1-408c-891c-268d2b4791c7
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=448f6d89-da5d-4e6e-8fd3-7ca99eab75b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ad:93:6c:ad:67:5c:0c:cd:79:30:80:0d:e6:
                    44:4a:b6:fe:12:ec:14:bb:8c:50:20:88:c3:1a:db:
                    11:88:80:3f:19:e9:e5:9d:4c:48:25:9e:43:6b:a7:
                    53:5e:3f:61:68:76:00:d6:6a:9b:00:e2:84:76:71:
                    d6:fd:ff:b8:79:ee:8e:a4:e3:f6:83:bb:8a:be:03:
                    72:93:31:71:97:0b:10:68:8b:7c:0d:ff:96:f5:b2:
                    9b:da:bd:d1:5b:69:16:b6:2a:c9:2e:f2:41:21:1b:
                    8e:b9:86:73:b5:70:2b:c4:84:44:13:22:dc:11:86:
                    b7:74:f9:db:e4:2c:2d:f0:ea:09:86:29:b3:3b:62:
                    05:28:b9:b1:e4:c8:6f:64:3d:4c:12:62:6c:97:62:
                    5d:26:8d:10:63:41:50:bd:fb:cf:b1:af:02:5e:a9:
                    6c:57:a5:c0:42:2a:66:dd:9a:0a:77:e9:14:f3:13:
                    07:13:fe:b6:37:11:34:05:fa:34:17:27:5c:c8:a3:
                    07:2c:77:be:63:bb:19:f3:63:e9:a6:c8:ac:62:71:
                    be:63:0d:b3:57:37:cf:18:25:ca:83:c4:6c:fd:d3:
                    a8:86:11:52:0c:38:3d:99:1d:9b:6a:fe:45:01:11:
                    77:52:29:5a:4e:11:89:f6:43:08:e2:16:dd:5e:33:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:38:56:89:39:27:50:FD:9F:A8:DD:BC:0D:1A:97:07:AC:92:F9:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/678c9af5-e375-344d-99f6-39e192dcba5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl

            X509v3 Authority Key Identifier:
                keyid:16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:24:10:5a:ae:eb:b1:d3:92:0c:71:bc:e4:18:45:34:b3:
         8b:d7:09:1e:6b:c8:51:9b:85:eb:c5:f1:19:e3:4f:9d:e5:3a:
         fe:6b:d7:ab:60:38:87:d4:99:b0:10:cc:af:93:6a:dd:b4:67:
         f1:56:5b:2c:90:5c:68:8b:04:95:35:3c:7f:72:a4:49:b3:b9:
         aa:d3:53:b5:be:5c:e1:1d:e5:2c:97:c9:a0:41:14:6b:05:e5:
         90:48:ff:f0:86:08:88:f3:8a:f4:ab:9d:3e:4c:99:d7:01:da:
         b0:11:37:3b:e9:4d:99:1d:bf:4b:4a:9b:98:1e:96:63:15:8a:
         a9:e4:2a:52:82:37:65:f1:6f:fc:22:2f:fc:e4:d0:84:d0:4a:
         b8:21:46:5f:47:91:e7:24:31:6b:40:d0:97:43:c4:bc:40:38:
         fa:d0:54:c9:c5:d8:56:9c:df:4b:0e:01:ca:3e:54:1e:3e:f6:
         7e:2d:50:92:37:d5:92:6b:fd:bd:9f:90:02:b7:ac:58:2e:d8:
         38:f4:37:90:2b:eb:7b:41:82:b2:9e:15:88:83:0c:55:f4:ab:
         71:e8:af:18:91:a0:86:c0:16:b2:91:26:bf:e8:94:a2:42:fc:
         5a:f8:79:ec:2d:ae:84:a4:b1:30:d3:d0:89:52:df:34:0d:49:
         eb:7a:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:58 2025 by rpki-client