Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa
File:                     396d499f-2ea7-3c33-ab89-036118ac5c6c.roa (raw, json)
Hash identifier:          VwnTKI24zrGwaARwMwH6e2Y7mJ7MCd3Dkmkw2Dp5a5U=
Subject key identifier:   9A:43:C1:BC:41:E4:BD:A4:07:72:7E:54:0E:E7:D5:3A:CC:29:89:EA
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584BB88D2CEC8FC1ED00CB91C880
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     31898
IP address blocks:        2602:fdaa:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2c:ec:8f:c1:ed:00:cb:91:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f2390b7b-e219-49aa-b994-da66477a4412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:a9:f5:6d:14:02:67:94:85:75:78:6e:3d:
                    f2:09:ee:78:87:00:84:73:27:a1:71:c1:ef:f6:5d:
                    ef:ac:5a:99:e7:5d:1b:b6:0e:36:7f:df:81:10:fb:
                    fb:3f:0c:ac:07:75:65:e4:20:50:bc:d4:92:57:cf:
                    0e:06:fc:23:96:0d:70:82:8c:48:02:9f:31:da:3b:
                    d4:d6:3e:d8:2f:c2:99:d5:da:89:ba:43:96:a8:78:
                    86:4c:58:c8:7e:fb:ad:80:cb:69:29:93:0d:0f:4b:
                    35:89:d2:f4:c5:7e:4a:1c:64:bd:d6:db:e7:db:c3:
                    b6:51:1c:26:9e:ac:ce:5e:46:c3:ce:62:d6:00:02:
                    da:fb:e1:06:5e:f4:19:73:30:a5:06:e7:54:3f:39:
                    15:0b:b0:c4:d0:82:b5:ef:1f:76:ff:4e:8d:06:86:
                    46:65:37:8c:b6:a1:6b:32:bf:fa:03:96:b9:c5:73:
                    1f:14:f6:2d:cb:fc:37:a2:be:57:70:f3:fd:f2:27:
                    0c:bd:34:a5:ec:f6:01:39:a3:ac:cc:4f:86:b5:b7:
                    99:29:e3:4b:0f:c7:15:42:fd:e3:f4:2a:5d:38:cb:
                    6a:2a:d5:47:65:14:11:b8:a8:d2:65:9e:9b:fc:89:
                    d3:b6:91:6a:9d:6e:76:5f:f0:f7:7d:44:da:8f:ac:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:43:C1:BC:41:E4:BD:A4:07:72:7E:54:0E:E7:D5:3A:CC:29:89:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:2b:48:59:ee:25:e7:e7:16:03:e9:a4:5f:df:ef:3a:15:
         d7:3d:0e:2f:fe:3f:63:8b:f0:de:c8:78:a3:9e:ee:c7:c5:c7:
         0c:6a:bb:dd:e2:52:4a:8e:76:7f:7f:72:0c:3b:8f:91:a2:57:
         f2:dd:11:30:53:72:89:d4:0c:96:9a:4a:c0:e1:8e:71:c8:25:
         c8:ed:95:a5:96:31:ad:79:1d:32:97:30:ff:66:45:64:62:e3:
         11:03:14:e0:eb:25:4e:0a:0e:bc:85:f6:05:65:43:81:0b:46:
         a3:60:7b:a6:f0:26:4d:1d:8e:fa:2a:f9:96:66:e2:60:ff:36:
         cf:b7:e6:4c:a9:c3:03:53:bb:32:44:24:df:d2:fd:1a:54:d3:
         2d:3d:8c:12:28:59:77:21:5a:b8:8f:51:81:02:aa:de:ac:36:
         85:35:5e:fc:a6:c1:88:b5:12:64:66:1f:ff:b7:81:11:7e:a7:
         c3:16:af:92:de:f1:67:a1:e3:2b:50:21:fa:55:47:92:ab:03:
         c4:06:76:37:ba:84:fc:66:63:3e:f4:38:23:83:03:66:84:ee:
         06:79:c1:2c:38:b3:cd:bf:e9:37:39:0c:e9:bf:7c:d7:ab:a4:
         37:e3:8e:d8:50:47:5c:29:d7:6e:30:01:2e:e8:d0:6c:3f:c2:
         99:1b:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:24 2025 by rpki-client