Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cd93e311-4a42-3f6d-9830-4dea63dc5247.roa
File:                     cd93e311-4a42-3f6d-9830-4dea63dc5247.roa (raw, json)
Hash identifier:          KzGxUzWDPmk8clVU0e7+zbrYQ7zQbaPzjHEgXeMNDkA=
Subject key identifier:   47:26:9D:BC:38:99:F0:46:B7:3B:56:08:1D:49:6B:B1:DC:27:66:59
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584BC2706B38A2E08C29BB0C6D00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cd93e311-4a42-3f6d-9830-4dea63dc5247.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     14593
IP address blocks:        2602:ffe4:c63::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:6b:38:a2:e0:8c:29:bb:0c:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=7b93281f-058b-473a-b59a-cffb7399850f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:e2:18:d7:6f:6a:2f:19:7c:d2:81:17:42:
                    c1:c6:79:d1:e7:6c:f6:0a:aa:80:f2:52:cb:81:14:
                    5d:a3:02:50:b8:e4:97:e7:08:4e:52:3c:04:6a:ff:
                    41:d3:93:e7:99:73:4f:53:ee:20:59:be:0d:ad:db:
                    c5:4b:21:fa:59:71:62:74:c3:54:03:b7:43:d2:fe:
                    54:dd:8e:0e:8f:42:b4:6c:ec:1d:97:67:de:20:8e:
                    a1:9e:76:63:ee:59:92:1a:49:a7:f3:d1:14:ed:47:
                    72:88:a4:e3:db:2a:16:2e:3c:77:74:53:32:88:c5:
                    9b:12:2c:fc:af:ff:15:60:25:53:45:2c:f0:c7:11:
                    ed:f4:fd:f3:3a:85:91:b5:b5:f7:21:f4:d6:f9:64:
                    66:07:97:ff:6d:e1:3a:2c:00:2c:68:b5:39:0b:51:
                    0f:dc:c8:dc:b6:28:dd:b3:cf:41:53:bf:6a:f9:30:
                    ce:41:5e:08:7b:66:4a:fd:99:33:fd:f8:b0:ef:f9:
                    31:ad:4b:7b:e1:37:57:89:c8:b1:31:aa:c1:85:b6:
                    f7:71:ad:e5:53:08:0a:63:bf:37:7f:cd:93:84:c2:
                    73:64:e5:15:0d:4f:05:c8:f5:e4:d0:dd:17:d6:f3:
                    d6:8d:74:11:ef:30:fb:aa:69:83:d0:f0:ef:e8:b3:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:26:9D:BC:38:99:F0:46:B7:3B:56:08:1D:49:6B:B1:DC:27:66:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cd93e311-4a42-3f6d-9830-4dea63dc5247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c63::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:3f:a6:3a:b1:96:28:c9:c2:7e:9e:73:f7:c6:6c:8c:9b:
         90:a7:a9:d8:24:d5:09:be:fd:77:88:dd:65:09:e8:06:3e:31:
         99:76:18:52:0f:a5:1e:2e:26:c1:6e:9a:3a:f3:e6:fc:52:1d:
         f3:ea:a7:ca:78:c7:34:7e:2b:3c:b1:d3:77:f1:be:15:8a:bb:
         7f:db:5d:c1:ca:a1:c2:29:75:29:67:70:f5:ad:9f:36:ad:40:
         96:d2:63:64:89:89:ab:1f:41:1f:6f:d2:5d:73:e2:34:b8:dd:
         ac:3a:25:28:b2:37:45:f7:50:f3:41:ea:f9:c8:54:50:3b:af:
         29:da:69:ca:29:4e:18:84:f5:be:3b:95:14:b1:76:92:7a:d7:
         cf:87:02:50:7e:93:1b:ad:a2:e1:63:e5:0a:ef:ac:a6:0f:9a:
         02:d1:3f:0a:75:6f:03:60:71:71:57:62:0c:70:65:22:55:6b:
         4c:32:1e:cb:33:e5:ed:75:e0:d8:99:64:7a:97:39:a5:66:40:
         33:71:32:59:8c:de:78:aa:46:ae:f9:79:7c:71:bc:c6:54:f1:
         94:7f:de:9c:5a:c1:17:a8:e5:4d:16:59:cd:58:c1:35:92:8a:
         bf:99:18:7a:6c:b3:67:c8:76:38:cb:3e:35:40:ec:03:f2:f7:
         5b:09:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:18 2025 by rpki-client