Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa
File:                     0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa (raw, json)
Hash identifier:          cIQa5NS3BcL5qQzhflPEpsG3CMUbjnzuswOKkRAFgvM=
Subject key identifier:   B4:5F:77:F9:FD:67:A5:1C:81:58:E2:FB:F9:12:6C:BC:CC:5E:C8:02
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584BAD624FC39E8BEC86693D9950
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     63183
IP address blocks:        2602:f7fc::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:4f:c3:9e:8b:ec:86:69:3d:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=f83628c8-53cc-4413-97a3-48f88f7ffa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:2f:a7:fb:64:57:6b:4e:86:89:46:d2:76:
                    7f:3f:43:74:d2:23:ff:ec:8b:a3:c4:36:27:0e:cd:
                    f9:87:65:a3:d5:7c:8a:59:3c:35:14:68:d4:0e:5d:
                    5e:27:b6:21:9e:8f:7f:15:46:42:95:2a:57:ad:1b:
                    49:1f:e3:79:e3:33:c5:b6:2a:a8:bc:d8:d2:54:07:
                    b3:2b:0c:25:d4:2f:6a:40:68:1e:b6:b1:5e:07:01:
                    a8:15:db:c0:e4:83:48:d9:80:5b:76:90:12:8b:27:
                    aa:af:62:06:1d:72:43:00:2a:78:2f:ee:44:6d:ac:
                    c3:75:9c:7b:29:64:19:9a:70:68:29:d3:7f:6a:60:
                    c3:47:60:ff:11:da:dc:ee:7e:bf:25:37:29:f5:01:
                    eb:9b:87:6f:56:e9:fb:7b:9a:08:ec:11:26:7f:3e:
                    9b:20:bf:ca:2a:78:f1:62:57:b4:76:27:5f:79:e5:
                    b5:e3:95:5e:c2:23:84:15:d7:f9:e7:c3:eb:fc:cd:
                    13:f3:1f:53:98:9f:b7:e7:0b:37:bd:f2:88:90:da:
                    19:65:cc:42:13:1f:fa:1f:e9:cc:2b:43:6a:93:d4:
                    bd:31:10:c8:8c:dd:9b:80:e5:d5:3c:35:d5:95:28:
                    de:69:ef:13:b9:fe:eb:bd:2a:fc:09:15:da:e6:40:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:77:F9:FD:67:A5:1C:81:58:E2:FB:F9:12:6C:BC:CC:5E:C8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/0b12d2d8-9f66-3d9b-8b6d-ea91e52c701a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7fc::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:8f:f7:dd:6a:7f:d6:be:7c:cd:1f:43:08:5b:26:96:78:
         bf:fd:8a:92:ca:b2:11:10:45:07:93:57:9a:56:9b:06:5a:e0:
         e6:3c:b1:17:a9:f7:d4:a5:89:8e:16:d6:19:94:da:13:de:ac:
         fa:60:85:41:02:4a:06:dc:c5:c1:f0:ef:be:62:7f:ee:e0:66:
         4a:bc:f5:f6:24:a5:29:ab:8f:08:8b:28:e9:f1:50:18:9c:69:
         42:60:4a:42:0a:7d:fd:5e:89:33:b4:e3:2a:7d:95:f9:ad:9c:
         ce:cd:a8:d2:dc:13:9b:81:cb:8b:3f:5a:ff:aa:29:a2:68:21:
         e1:22:ad:0f:5a:c7:ce:20:1f:94:b9:20:71:ce:38:6f:1f:55:
         66:39:e9:80:ae:a5:0c:89:d7:70:ea:86:2a:98:cc:54:cc:94:
         1a:5c:a1:66:42:8c:11:a9:bb:27:47:c5:88:d7:19:ff:db:38:
         78:9a:84:92:09:e7:33:6e:ef:b0:81:a7:ac:28:36:40:57:44:
         a3:c5:94:ca:c9:8d:11:09:4f:8a:6d:6b:d0:ff:96:d6:b2:68:
         b3:57:8f:77:33:54:bf:cc:28:31:dc:a8:65:ec:c0:58:b3:a6:
         b3:40:d2:1c:9e:2c:1f:a1:73:83:9b:c6:9f:47:47:3d:38:a4:
         5d:68:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:22:57 2025 by rpki-client