Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
File:                     4a943796-c7ae-3193-be9d-cc79adb0f56b.roa (raw, json)
Hash identifier:          OFOXE+T2Jt+wTI0nqVw/f/7WhoshUG1DBwD8IuJlsVA=
Subject key identifier:   97:81:BA:28:4A:9F:AA:AD:52:8D:32:DF:CF:86:BB:C6:24:0E:21:8E
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584BA9326742B3E93DB3BCE22D20
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     200728
IP address blocks:        2602:f9f6:840::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:67:42:b3:e9:3d:b3:bc:e2:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=beb17dbb-4244-456f-860d-eec6f8c8d770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:7f:83:95:79:e8:f4:c3:68:0c:00:db:9d:
                    40:0d:d5:d3:c8:54:f0:81:7a:9d:26:57:d7:bc:76:
                    6c:f2:ab:62:0d:dd:11:81:e3:43:c8:ad:77:e6:7f:
                    1b:cd:a8:ec:87:b7:6e:fb:5d:07:a8:7a:a6:04:8f:
                    e3:35:3f:39:25:7c:5d:c1:0b:db:98:b2:2f:23:01:
                    43:e6:58:e9:1b:5e:e1:7f:fe:ae:17:2c:cb:10:1b:
                    03:64:d8:57:7f:0f:15:54:2f:d7:a6:b7:c9:17:52:
                    fd:32:a5:84:0f:68:89:99:8d:19:e0:fb:31:ec:b0:
                    fe:86:8a:93:32:3f:7c:17:8f:26:d0:b7:b9:36:9e:
                    cf:a2:de:0e:0c:40:66:b3:1c:ea:1f:95:d1:33:fb:
                    02:e9:28:1e:9b:c2:bc:d4:d2:43:4c:b9:6e:77:7c:
                    24:7b:01:38:47:9f:6d:f7:94:7c:66:75:a5:e6:49:
                    35:02:79:84:70:d3:42:ee:26:af:64:d3:89:ed:50:
                    49:e9:b0:51:f7:20:0f:42:ab:93:23:44:3d:f8:fe:
                    b2:ae:cf:4f:89:c5:4c:53:26:c8:16:d6:4d:f4:97:
                    76:a8:3d:ae:ad:7d:e6:f0:96:65:2c:1e:c5:b5:e8:
                    f4:01:f9:83:3f:09:bf:f8:97:f0:78:5d:b3:c8:ae:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:BA:28:4A:9F:AA:AD:52:8D:32:DF:CF:86:BB:C6:24:0E:21:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4a943796-c7ae-3193-be9d-cc79adb0f56b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:840::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fe:84:6b:68:19:01:aa:54:f8:f0:e4:fe:a6:70:ef:9d:48:
         27:37:89:2c:8a:25:3b:d4:f8:e6:ee:a2:31:79:cc:8c:13:81:
         db:ab:5d:de:98:a4:2e:ab:0e:e0:8c:68:b0:b2:72:20:93:a6:
         06:6f:ec:aa:b1:58:d6:16:c5:96:ac:e2:a7:4c:bb:7b:06:23:
         d9:08:7a:0f:72:cf:41:85:04:39:e7:62:8f:44:6e:ed:d8:aa:
         46:01:0c:94:21:0c:69:48:8f:19:43:f0:20:18:b4:97:b3:e1:
         9c:f1:50:bd:b7:40:2b:43:83:1b:49:fe:64:02:18:49:fe:d9:
         76:78:2f:d2:e8:c7:a4:62:43:1a:51:24:a3:86:8a:46:80:29:
         45:cc:2e:59:93:a9:c7:d2:ac:b6:65:14:07:bc:ac:06:dd:cd:
         0f:40:0d:e1:d9:99:97:6e:be:22:64:91:a7:5a:6c:3c:27:0f:
         0f:91:ad:f6:5a:aa:f3:21:f9:8c:c5:fa:ed:51:3f:22:05:26:
         0f:5c:a5:a3:2d:82:c9:db:ed:8b:a1:a9:25:b0:7a:16:c2:e5:
         a6:a6:8b:d4:48:39:3f:72:a7:d2:71:b5:26:0a:1c:25:3b:88:
         3b:ae:82:03:d6:d3:6f:e7:84:25:15:b8:2c:a5:0e:60:0a:9f:
         4e:ce:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:33 2025 by rpki-client