Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
File:                     0f760c1b-2287-3417-81e0-e555031d9abd.roa (raw, json)
Hash identifier:          BAaXgJmpx0+T7sa/WYgJjEoShmlGM1Lkb7BxkVXtpDs=
Subject key identifier:   BB:60:18:64:82:DB:92:DC:EB:F5:51:E3:58:0D:13:2E:26:19:23:A0
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F4328584BA0D253CDC4ACC1D8B1E72700
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     399209
IP address blocks:        2602:807:6003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:53:cd:c4:ac:c1:d8:b1:e7:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=01914da5-6ddc-457f-8496-9614c27a1936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:92:eb:e5:34:58:80:bf:90:e2:e9:b0:76:
                    1f:53:d4:eb:45:ef:a0:4e:98:60:08:3d:1c:b5:b9:
                    a0:f2:ea:c0:7f:7d:d7:65:4b:9d:30:57:90:9f:2c:
                    79:aa:37:fd:c4:a6:f2:1b:f6:bb:e7:41:34:09:53:
                    da:07:fd:ed:2e:d1:55:34:b5:1c:dd:1a:54:84:73:
                    a6:1f:c5:c3:24:3f:42:3c:94:33:1e:9c:23:fa:a7:
                    bf:67:93:bd:6b:ee:83:f4:61:6d:a9:ec:a8:31:94:
                    ff:f4:5e:a7:83:ee:9c:c3:08:63:fc:5a:b6:77:07:
                    2d:b8:c6:d8:d5:d4:90:0e:8b:ad:b5:27:14:1d:e4:
                    96:90:30:48:fb:67:6f:8b:fa:eb:48:ef:73:02:29:
                    a3:22:db:e0:b5:6c:94:59:ca:1d:c7:c4:02:ee:ff:
                    23:3c:64:a8:38:88:f3:c9:99:1e:48:c5:0a:49:94:
                    52:79:4e:16:ce:fd:bb:b2:3e:88:c3:22:fb:66:a5:
                    1f:22:16:22:0b:0f:ac:ab:a3:1e:18:42:1d:56:5d:
                    e8:35:23:7c:72:e7:44:20:21:b9:33:fb:60:e4:8c:
                    a3:c3:33:80:34:d6:d8:3d:6c:2f:19:52:60:73:74:
                    bc:1b:9e:5e:31:45:34:49:c5:bd:77:64:04:b9:27:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:18:64:82:DB:92:DC:EB:F5:51:E3:58:0D:13:2E:26:19:23:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:aa:65:a9:04:02:d2:b2:80:8d:35:82:8c:c4:b5:78:d7:
         55:41:e7:14:07:69:fa:da:fe:dd:09:87:3c:ad:ac:4a:e1:7d:
         ae:78:a5:0f:72:a5:f2:81:29:24:02:d3:73:fc:7e:16:b9:8c:
         3b:50:51:19:eb:55:8f:9b:f7:9f:56:df:44:93:ad:d7:a1:72:
         33:3e:f2:96:43:51:ce:5d:14:45:e7:2a:b3:2b:1d:ab:c8:0d:
         28:59:1b:5e:be:4b:0e:33:ea:81:ee:f7:c7:9e:43:e8:e4:24:
         0a:50:d2:c7:2a:b2:0e:0a:19:f7:e2:7e:26:43:7e:e2:92:3b:
         e5:c7:f0:36:3f:f5:e9:7c:3d:c9:e8:3c:e5:a9:0a:8b:96:cd:
         23:96:f6:92:fc:75:d8:f7:bc:04:df:05:a9:28:b0:45:2d:5e:
         b5:72:b2:c3:90:50:ba:9e:11:a4:00:22:1e:13:96:36:2c:1a:
         21:c1:52:1c:96:f7:c5:b6:a6:52:f0:d5:79:ee:4f:0c:11:7e:
         37:f6:7a:08:e3:43:02:fc:2c:61:6b:ad:dd:08:1c:3f:cd:4c:
         28:bc:b3:e3:99:f7:db:2b:f2:92:49:b2:55:df:19:2f:60:5f:
         10:29:2e:a9:e5:bf:6a:17:27:93:dc:a6:47:ae:95:04:43:f2:
         97:32:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:34 2025 by rpki-client