Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa
File:                     c4d746a7-8890-3514-adb3-bf2813a22fe1.roa (raw, json)
Hash identifier:          lyAY3nr0MRVDlSxnged6c7zA3weZZC4rxHRlxMFYrN8=
Subject key identifier:   54:93:E6:04:E6:9E:1E:E5:58:A9:47:1B:BF:5A:98:73:37:B7:D9:C9
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584B328C335A7D6BB09A58AEF600
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     393336
IP address blocks:        2602:ffd1:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:33:5a:7d:6b:b0:9a:58:ae:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=b6237b1c-d658-46cc-8747-5d417d7fa969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:fc:8f:55:d7:83:29:f5:17:8b:b0:0a:b5:
                    79:83:49:2d:fa:0f:18:8a:c2:5b:72:9b:2c:0c:1c:
                    d4:9b:9d:7c:4e:88:6c:28:13:bf:70:87:76:9d:b7:
                    80:a8:f9:ce:77:14:82:e9:15:9d:18:f9:f1:34:96:
                    0c:9a:ba:2f:d8:1f:04:9f:2b:45:3e:12:0a:d6:30:
                    e6:b1:31:b8:86:ef:0b:9c:6d:0e:d8:a3:28:3d:d3:
                    9f:3f:78:e4:45:db:25:7e:01:2f:4b:48:9e:f6:1f:
                    a3:58:11:39:10:5b:8a:4b:73:42:93:5f:74:d5:bc:
                    7b:1c:bb:0d:04:f0:73:15:d9:1e:e0:7e:32:50:22:
                    37:1b:fe:4b:c8:f5:b8:90:4d:4d:46:33:3e:22:21:
                    12:a1:89:c2:db:34:4a:23:8a:f2:dd:5a:43:bf:e8:
                    d9:b8:af:aa:7e:a5:e6:f1:5c:76:66:ff:f6:0e:14:
                    18:93:9c:46:ab:85:87:a8:a9:bc:60:3f:fb:ef:dc:
                    6c:ba:eb:79:82:bc:b4:50:53:61:c0:98:18:88:37:
                    95:6c:27:cb:9d:d2:f4:9d:94:b9:50:23:6f:0e:4e:
                    d5:62:4e:08:d1:41:e0:0d:7f:b9:ab:aa:41:f8:74:
                    7b:e8:07:2e:19:53:35:50:0d:4f:ac:3e:57:62:af:
                    e6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:93:E6:04:E6:9E:1E:E5:58:A9:47:1B:BF:5A:98:73:37:B7:D9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/c4d746a7-8890-3514-adb3-bf2813a22fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:42:f6:a5:1b:97:f9:81:4d:69:3d:90:6a:87:e6:d2:42:40:
         2b:ca:b2:f5:fa:a0:a9:de:29:5d:f2:e0:3c:2a:5a:fe:b4:3b:
         40:f4:0a:d7:b3:d0:9a:6f:50:76:85:55:a3:51:76:b3:1e:c3:
         c0:bb:27:9f:ba:f1:6f:a7:f8:61:85:d1:f4:6d:dd:6c:4d:aa:
         fe:c6:b1:16:45:da:66:be:bc:92:1f:96:b7:ac:1d:ec:2f:a3:
         f5:13:1a:8e:35:f5:ad:6a:f3:26:4a:82:56:e9:49:0a:6a:e5:
         ad:00:69:24:2f:91:54:e4:3f:79:b5:6c:87:f6:67:b2:61:76:
         72:a4:d5:32:54:99:07:76:cc:ca:aa:a9:34:f9:ba:1b:aa:32:
         cb:f1:5d:e2:69:48:b1:c4:cd:f9:a5:c0:b8:19:c0:a8:03:a5:
         f1:9a:81:54:fb:ad:ee:50:b0:5b:2c:a3:33:bf:f8:2e:01:e8:
         7b:d2:fc:81:15:0c:55:43:f1:02:57:ef:c5:d2:4d:83:2c:41:
         03:88:4d:8a:45:6e:d4:65:9a:17:e6:06:25:60:7a:45:13:e9:
         80:e3:bb:ec:69:b7:a9:ad:e4:d2:1b:0a:66:8f:9d:3e:9c:38:
         6c:e1:49:62:e4:ef:09:37:32:72:0b:ab:ea:21:a5:4e:1e:27:
         8e:18:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:21 2025 by rpki-client