Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa
File:                     a0a69a88-573c-3474-b573-7ae77353dc2b.roa (raw, json)
Hash identifier:          eQMfX2yO/tauwZHkfzoXXGzFzUDv//VqGMHYWzTP6dY=
Subject key identifier:   AD:9F:22:06:1D:2F:09:3D:CE:75:36:EE:4A:B9:05:27:41:85:2B:99
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F4328584B8D47806F585C1DFFB8CCC5E0
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     399836
IP address blocks:        2602:f757:ffa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:80:6f:58:5c:1d:ff:b8:cc:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=909ce4ae-592c-4a91-8da5-fa7a6bceae62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:86:ab:c4:e6:87:81:1b:7e:3b:b1:6b:eb:
                    1f:f8:86:d9:5d:45:db:11:c1:a8:22:6a:05:82:82:
                    ae:15:fd:e6:4b:8d:b4:3d:62:59:96:06:c9:bf:27:
                    1c:8f:eb:2e:15:60:97:e9:ff:86:7f:b7:08:0d:f9:
                    9a:1f:97:bc:b1:16:10:be:07:56:14:74:9f:d9:a9:
                    f2:4a:29:cd:de:a6:3a:20:cd:6c:a3:14:c0:13:68:
                    c7:66:1c:4e:03:bf:25:04:48:39:bb:10:5b:31:9e:
                    dc:e5:b7:0e:c7:84:69:b4:02:d0:8b:8b:0f:c2:04:
                    de:b8:cb:18:8e:35:8b:45:82:73:19:73:3c:b6:ed:
                    ff:c1:44:0a:02:80:65:db:84:e6:5a:56:f1:7a:75:
                    cf:55:ab:7a:ad:0b:bd:12:b9:ee:4f:6f:23:2d:4a:
                    65:bd:83:11:00:b5:5e:1c:a7:30:6e:6b:5e:f4:e8:
                    af:2b:65:88:43:4b:00:8e:81:45:15:a8:d3:cf:30:
                    0a:ee:5f:16:00:4e:9e:80:7a:fe:ee:c4:4f:54:5d:
                    b7:64:88:e7:8f:ea:31:34:df:12:80:af:e8:16:01:
                    46:2e:ea:23:44:24:50:2d:09:31:47:32:57:ba:1a:
                    3b:44:58:91:b0:e6:f9:23:ad:65:58:3e:fb:19:bf:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:22:06:1D:2F:09:3D:CE:75:36:EE:4A:B9:05:27:41:85:2B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/a0a69a88-573c-3474-b573-7ae77353dc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f757:ffa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:23:61:6c:b1:52:30:4c:83:e9:66:98:46:17:68:74:00:
         d3:57:7d:28:cc:98:1d:52:31:e1:37:2a:ee:41:d3:a3:6d:42:
         64:3a:67:ce:81:ce:7a:a2:a0:71:33:fd:53:c4:67:87:8b:cd:
         d4:50:44:40:0c:10:d6:ce:e2:f9:50:46:0b:f7:8b:08:11:ad:
         63:6e:23:b6:56:84:f4:b1:39:3c:42:09:b4:52:2b:d0:f6:89:
         84:78:19:8c:ec:e9:93:d1:cd:0d:0c:d1:9e:73:bc:10:34:bc:
         de:78:af:96:97:ca:84:ed:ba:95:c7:35:66:5d:7e:32:cc:d8:
         3f:a8:90:1e:75:b5:60:c4:c5:aa:c1:c9:ca:fe:4d:cc:94:c4:
         46:cd:15:24:18:59:46:a2:3e:1d:ed:a6:83:e9:de:8e:c8:ff:
         fa:c8:ce:7b:be:96:47:d2:6b:cc:4d:31:a7:2e:58:52:8b:fd:
         4b:b3:99:62:c0:c2:1b:2b:9b:e8:94:9d:46:4f:37:54:66:63:
         0b:ed:73:7f:1f:a2:a2:48:d3:7b:e7:54:12:04:57:08:29:b0:
         c6:31:c0:e2:58:52:c6:37:b6:d1:20:5f:09:05:20:3e:de:ad:
         bb:3e:4c:5c:f1:68:ea:06:6e:4f:3b:11:f6:10:1e:57:4e:15:
         79:9f:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:09:53 2025 by rpki-client