Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa
File:                     9dada9a7-7f65-3c0c-aad3-0a897433de44.roa (raw, json)
Hash identifier:          ddhOfFF3hUcdhK4DKQuCzAbsMgSsIgKbTBIjLNJAjQ0=
Subject key identifier:   5B:A5:74:B7:B7:95:45:92:12:46:D3:94:3C:A1:35:30:8A:E6:5B:91
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F4328584AE1969272F8641A24B1697438
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15082
IP address blocks:        2602:f78b:a00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:92:72:f8:64:1a:24:b1:69:74:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d730a869-e04b-485d-b3a5-70f9f6d63e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:e7:40:a1:ad:bd:10:e4:f1:d8:17:59:66:
                    76:29:7c:fa:bd:c7:cb:01:52:27:7b:cc:3a:1f:13:
                    c1:bf:19:c5:03:25:94:bd:3f:3e:ff:0c:aa:d9:84:
                    1c:43:80:2b:58:6d:21:49:63:be:e8:28:0b:8c:b3:
                    d6:d5:1b:e8:69:22:17:2d:02:9b:19:d9:4c:6a:e8:
                    8c:da:0c:a8:55:89:b4:92:fb:79:34:b0:a1:4f:78:
                    64:95:db:37:59:96:f4:0c:32:f5:4d:38:53:b3:16:
                    17:4c:e6:91:01:9f:c7:ec:0a:6d:4d:8e:9b:ea:1f:
                    18:77:5d:42:88:0f:8e:11:77:dc:db:b4:85:74:d2:
                    39:74:b1:b0:ba:33:c5:5d:c3:32:59:7e:15:a1:a3:
                    50:4d:b8:ab:3d:9f:ff:ad:a5:92:a4:10:5e:f3:3c:
                    0d:ac:ad:93:9e:f6:b0:57:99:7f:18:90:4a:05:02:
                    a8:a3:45:a9:02:28:00:c7:9a:45:40:7f:a5:fe:27:
                    3b:7d:9f:85:89:d6:0c:60:48:ce:d4:b3:42:e4:d7:
                    2c:2f:a8:a2:28:9b:71:a9:aa:8c:5c:1b:64:96:74:
                    3b:d4:79:5c:91:88:e8:f1:fb:05:c0:37:6f:fc:cb:
                    b9:8f:cb:8f:e9:db:eb:0b:a5:19:40:dc:f5:b1:00:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:74:B7:B7:95:45:92:12:46:D3:94:3C:A1:35:30:8A:E6:5B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/9dada9a7-7f65-3c0c-aad3-0a897433de44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78b:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7f:86:5a:a2:73:08:b5:69:75:28:ca:32:50:a9:56:81:1e:
         a9:52:49:96:d1:6e:8e:61:a3:b9:ef:d2:a9:e0:c1:f5:0e:f7:
         59:63:9e:7f:b1:67:d6:8f:1b:f8:6e:a2:7d:05:8c:11:9e:df:
         e8:c9:a0:19:89:88:0e:d4:7b:e2:1e:3d:b8:4a:66:f6:57:f4:
         55:a7:a4:95:c2:49:a9:66:b5:f3:34:14:d0:12:6a:ac:52:11:
         d8:0f:0c:2b:5c:36:1f:f9:78:b9:98:9a:44:2b:20:ec:4a:f7:
         78:ab:e9:5d:f8:a2:2f:22:15:9f:78:81:00:60:00:71:8e:87:
         7f:f8:79:c9:11:95:62:72:3d:da:3a:c7:b2:08:7f:f6:26:e8:
         81:b3:70:a1:31:04:46:af:b4:7e:42:36:dc:98:1d:f3:a3:a1:
         cd:65:a6:9b:79:18:a9:e3:45:27:47:54:da:23:7d:98:c6:6d:
         67:d5:54:04:49:2b:3c:25:ae:b4:35:af:f6:b7:c5:0a:67:4f:
         78:09:54:e5:15:95:27:08:d2:c1:ec:06:a3:8d:20:cb:33:9e:
         9d:c9:34:6f:84:df:58:45:70:cc:c0:5f:43:77:41:0a:f2:f4:
         a5:0e:f8:1d:04:51:dc:56:02:17:67:5b:57:0c:81:50:5b:a0:
         4f:34:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:19 2025 by rpki-client