Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edc0488a-35a0-3509-aec8-780c49e88194.roa
File:                     edc0488a-35a0-3509-aec8-780c49e88194.roa (raw, json)
Hash identifier:          fijbU3lPlmFYusQdLfntlyA+OpCvOkrK3jcrAwwl7rU=
Subject key identifier:   5B:C4:F8:79:64:2B:63:67:DA:CD:AF:41:5F:75:ED:1D:62:8A:74:C9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D7676336EBA3DF0CCD040
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edc0488a-35a0-3509-aec8-780c49e88194.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        2602:107:5200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:76:76:33:6e:ba:3d:f0:cc:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=e4b39374-facd-400a-b1e8-246d529e3204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:7b:64:50:9c:1a:04:73:68:8f:7c:ca:21:
                    03:16:c5:dc:db:79:ff:0d:53:33:27:43:66:96:5b:
                    c4:68:cb:24:7d:95:3d:82:73:ea:14:24:ca:13:6d:
                    d7:09:38:ef:b7:11:2a:96:38:72:a1:13:11:e1:c4:
                    32:9d:50:e3:08:44:ec:2c:ca:df:b4:3f:67:70:d5:
                    db:c1:7b:c4:98:35:df:f5:73:f0:5f:42:5f:ad:57:
                    9e:a1:fd:ac:78:7e:84:4a:0d:97:2b:2a:22:d1:ea:
                    19:34:9a:22:d1:4b:f4:b3:76:c0:46:9b:bb:e0:4e:
                    7d:61:15:52:5f:0b:01:f4:5a:73:69:83:48:91:a6:
                    10:c9:d9:df:7e:45:a9:66:fd:a3:67:fa:bb:5b:78:
                    e0:8f:c2:f4:4b:9e:6a:d3:9d:cd:94:25:68:7b:c0:
                    b5:e6:2b:e1:02:04:97:07:cc:27:1b:0a:71:31:83:
                    17:f1:5e:3d:08:ba:bd:eb:f3:1d:d0:7b:f5:cd:7c:
                    08:90:38:84:1d:ac:e6:fc:ef:39:61:6b:da:04:3e:
                    a7:68:40:02:15:e6:bc:48:b8:44:4f:f6:35:86:8a:
                    cf:c0:18:ef:67:93:36:4b:53:c9:fe:1a:f8:87:36:
                    a6:0d:16:25:19:aa:da:2f:d9:e6:e9:b5:fa:67:17:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:F8:79:64:2B:63:67:DA:CD:AF:41:5F:75:ED:1D:62:8A:74:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/edc0488a-35a0-3509-aec8-780c49e88194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:5200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:11:fc:d1:6a:80:81:3e:a4:64:f7:96:8b:82:e8:45:b9:66:
         5e:b6:06:3e:e4:d7:8e:56:61:44:19:cc:46:44:ac:69:46:66:
         87:1f:9c:f5:86:36:66:af:90:40:c5:33:7c:aa:fa:54:5e:bb:
         cd:e5:55:ee:f4:e0:33:c6:c5:ff:97:15:6f:53:d7:73:3b:c0:
         4b:c0:4c:e7:fc:4b:0c:61:7d:b9:92:99:b5:0b:6f:65:d5:96:
         61:07:b3:51:9b:35:d7:db:53:da:f9:63:f6:c7:c7:c1:21:b9:
         27:32:c6:37:5f:f6:81:f4:50:fb:81:d6:d2:d8:e6:6a:42:50:
         cb:9e:88:aa:30:8a:e2:35:ad:c4:a9:28:d4:6b:d9:3d:d8:b2:
         62:ec:c4:f0:90:94:25:e0:47:ee:7c:4c:6f:c0:48:9d:c3:f8:
         cf:b4:89:f4:d4:73:70:87:0e:6d:79:32:29:6b:b8:30:34:68:
         86:b7:46:ce:b7:13:e7:5d:b7:04:99:1e:4d:a2:a7:37:50:c6:
         55:67:30:9d:12:55:9e:9c:dd:f6:9b:75:68:c0:b4:0a:36:51:
         c9:49:e8:7c:0b:e4:e8:ea:fe:6e:07:47:6a:fb:d5:08:06:33:
         9a:0a:b4:6b:95:49:f9:83:e9:89:94:38:6f:54:69:01:44:75:
         6f:40:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:38:46 2025 by rpki-client