Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa
File:                     a835063b-cffd-3897-a165-8c038e531278.roa (raw, json)
Hash identifier:          urzVz0O3bOV754MRlAMgW/nTDG0BezOeVOrGdLvlcig=
Subject key identifier:   08:58:5C:9A:BB:EA:A2:2E:FC:F7:EA:40:50:08:30:76:5B:DB:60:F4
Certificate issuer:       /CN=b519abcf-d882-4fdb-9883-ac524c0180b1
Certificate serial:       010D0C9F4328584BAEC7C1DE5389213CD8E93D00
Authority key identifier: AF:CB:79:A6:E3:30:59:4F:42:46:B5:9F:10:98:79:FA:41:68:22:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     26692
IP address blocks:        2602:fa8e::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:c1:de:53:89:21:3c:d8:e9:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b519abcf-d882-4fdb-9883-ac524c0180b1
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=cccecce8-30fe-4858-aaeb-707004eb10df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:83:46:8c:c8:6b:ff:88:5d:63:f0:19:91:
                    08:e8:63:89:20:8d:7e:8e:5a:39:00:9c:26:07:f3:
                    96:32:ac:20:51:79:d2:9e:b4:90:c0:6d:d5:6c:18:
                    fa:61:e9:23:47:64:87:58:07:0a:55:73:75:ca:f4:
                    a4:1c:45:73:43:27:28:f9:2c:fe:41:c6:76:a8:fa:
                    8a:cf:af:26:55:76:61:08:cd:c2:b7:c3:79:a4:8a:
                    fd:43:bf:f9:22:40:d2:78:b3:f0:a5:d6:b8:05:b5:
                    51:e5:a7:e6:a8:29:42:f6:38:72:e1:e2:81:22:ae:
                    99:53:8b:20:57:84:16:76:eb:61:74:98:4f:7e:df:
                    9e:ef:f9:ba:48:64:60:e1:53:49:94:32:9a:53:1a:
                    24:6f:91:c7:5a:5c:20:c2:b5:b8:71:aa:58:ab:69:
                    33:92:42:64:64:c9:76:a8:2e:52:57:9a:d9:c5:af:
                    6f:08:99:76:61:c1:ea:e7:f3:fa:90:82:1c:b0:4f:
                    92:e3:c4:79:cc:17:b9:b4:96:55:7e:e4:82:7f:de:
                    d6:f3:41:5f:3d:d3:c2:9e:50:cd:cf:4e:4f:3a:5e:
                    c4:34:7f:5c:27:79:af:0b:0a:ad:8e:b3:99:be:00:
                    7c:58:f9:4e:f7:13:e3:f0:32:8c:8e:9a:7c:4f:72:
                    3f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:5C:9A:BB:EA:A2:2E:FC:F7:EA:40:50:08:30:76:5B:DB:60:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/a835063b-cffd-3897-a165-8c038e531278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1/b519abcf-d882-4fdb-9883-ac524c0180b1.crl

            X509v3 Authority Key Identifier:
                keyid:AF:CB:79:A6:E3:30:59:4F:42:46:B5:9F:10:98:79:FA:41:68:22:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b519abcf-d882-4fdb-9883-ac524c0180b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8e::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:9d:5d:4c:ca:c7:7c:2a:2b:4e:18:9f:10:84:47:22:ff:
         81:51:fc:42:cc:95:07:b4:62:42:3c:7d:7b:72:7d:b9:7e:14:
         a7:61:2b:71:57:5a:af:92:cf:f1:2a:56:82:73:dc:19:dc:87:
         cb:c8:85:4d:df:47:62:51:c4:3d:16:72:d8:48:23:9c:5e:80:
         d4:10:fb:00:90:4c:c9:fa:9e:93:d4:1b:c3:81:82:60:06:e5:
         5f:08:03:a4:5a:74:15:0a:ef:a5:6a:47:9c:52:93:80:8f:d6:
         41:3f:43:b1:1e:b1:f3:28:2a:84:2b:c4:36:af:c2:02:b2:ba:
         48:2f:d2:88:36:4f:19:99:8a:1f:3f:27:33:51:46:80:0e:90:
         96:03:aa:0e:94:b0:a5:38:4d:b7:8b:c0:52:7d:a4:8c:ef:66:
         ae:b7:69:e5:40:71:8c:8f:e3:79:36:87:15:91:60:e5:2d:94:
         a8:66:cf:63:f0:b9:4a:bb:3d:f5:0e:6e:c0:49:50:f7:5b:83:
         66:77:20:84:e3:20:0c:72:1b:9c:81:50:1d:c0:f1:91:61:83:
         43:64:e6:40:f0:32:e0:7d:2a:d9:2b:a6:bd:92:df:5c:48:7a:
         5b:5d:94:98:6c:c0:d7:72:fa:27:24:01:f1:99:5d:da:f4:61:
         cd:28:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:02:26 2025 by rpki-client