Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa
File:                     a547e87a-0aa1-34fa-bbf0-192a72d66039.roa (raw, json)
Hash identifier:          q/Xd7yeRNSpMobTgXlCsb5m+hcZAcPTChGztP1GezRw=
Subject key identifier:   8D:BE:C7:72:5B:2E:84:B6:DE:5E:04:BE:E8:72:2C:9A:17:FE:7E:8F
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584BBB7588016ACF652279638180
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     399980
IP address blocks:        2602:fd10:e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:88:01:6a:cf:65:22:79:63:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=1a658cd0-52a4-4588-a126-243d403bd7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:d2:88:5e:b0:86:36:34:e2:9b:db:37:a5:
                    40:13:a3:cc:9f:8b:1e:8c:5b:40:de:8a:31:da:79:
                    f3:94:53:c8:99:a7:d4:f6:38:ce:b1:b9:ec:e7:19:
                    5b:3a:f9:ca:a1:db:88:bc:16:68:14:fc:ae:8c:07:
                    82:bc:2c:3d:87:dc:e6:ba:82:66:1c:6b:9b:11:bd:
                    b5:33:3d:af:af:2a:b2:03:97:e8:16:86:ba:5a:fd:
                    8c:13:2d:2a:52:a4:8f:f3:9a:e7:d8:16:01:b0:c3:
                    73:3e:bb:7a:67:bf:60:82:61:c0:90:0a:f5:c7:be:
                    39:72:e6:d0:e0:37:ee:8e:98:89:22:de:3c:95:a9:
                    11:66:d5:76:31:98:19:ce:0d:c0:9b:03:58:e1:75:
                    93:8e:6f:44:93:d6:b2:48:cb:c3:24:03:e9:af:73:
                    05:4f:ba:ff:d0:e9:91:50:c8:d6:0f:67:e0:a0:08:
                    02:29:af:13:92:de:e5:4a:43:0c:a0:a8:b1:aa:87:
                    a3:36:01:6b:a9:e6:91:17:58:49:d1:34:7f:15:1c:
                    1c:b2:ce:5c:e0:19:7c:04:5c:6f:9c:a3:b6:f3:90:
                    b2:7b:70:d1:7f:e0:a8:db:33:91:29:69:99:41:40:
                    a1:0d:0e:4b:b3:b3:5e:25:9f:b1:5c:8a:a1:21:4e:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BE:C7:72:5B:2E:84:B6:DE:5E:04:BE:E8:72:2C:9A:17:FE:7E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a547e87a-0aa1-34fa-bbf0-192a72d66039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:65:1b:c6:73:c8:50:5f:94:39:32:2e:2f:c9:96:cd:3b:
         59:55:51:33:df:8a:7a:6c:78:51:d4:7c:3a:25:ac:58:86:c6:
         ac:e5:e6:d0:eb:5b:8c:f5:0b:c7:92:30:92:a0:78:0e:ec:9f:
         96:c3:ab:6d:c2:78:f7:e4:8d:92:23:ca:91:f9:94:5b:19:1e:
         54:da:2e:bb:0c:9e:d1:9f:0c:a9:30:fe:8c:51:59:13:44:03:
         9a:3c:ef:29:cb:c8:92:1b:fc:40:4f:a0:d5:0f:dd:8e:9c:52:
         63:63:98:76:26:00:73:60:20:93:51:86:1f:a0:5f:14:63:1b:
         0d:7a:c8:ce:97:ff:51:37:9f:74:47:53:53:0f:d7:b9:ab:0b:
         a8:d7:77:51:ed:dc:67:55:78:0c:84:23:19:04:33:37:17:b1:
         8d:2d:3e:96:65:21:29:f4:78:17:30:68:d8:51:0b:c2:21:e2:
         05:43:2a:2d:8d:27:87:70:a7:7f:39:44:fa:5b:e5:53:a7:32:
         6b:c0:90:ba:f3:5e:d9:2c:86:b1:23:00:b2:81:97:21:25:2f:
         37:ef:2b:54:93:5e:1a:2c:a6:1d:77:97:8b:c5:68:69:84:b4:
         f0:b2:4b:91:e4:fb:f9:6f:6b:e1:23:28:00:72:c1:e7:74:c1:
         91:82:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:18:56 2025 by rpki-client