Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
File:                     7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa (raw, json)
Hash identifier:          Dyk/ktYohpg9iKJc5OA/7Y/Ja2d8FT0iAVcZuls+XF0=
Subject key identifier:   A2:64:4C:E2:C9:2B:35:6E:0E:24:BA:D5:04:A4:B2:C1:FC:60:10:E7
Certificate issuer:       /CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
Certificate serial:       010D0C9F4328584BB2F82E48E97F94D061FEBB00
Authority key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     401734
IP address blocks:        2602:f640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2e:48:e9:7f:94:d0:61:fe:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=f2d30ccf-604c-4891-9a4d-8ad2085e2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:15:6b:04:69:13:74:a4:2c:50:85:08:ec:
                    25:28:4c:4d:5e:7f:9a:cb:11:91:73:48:1a:0a:f5:
                    9f:fe:62:85:a7:0b:3b:7c:48:4a:23:56:7b:b9:14:
                    c7:36:2e:f4:de:f2:3e:1b:d9:55:0e:d5:c9:c6:ba:
                    5a:81:13:26:d2:b2:1f:8f:fc:15:a9:d8:d1:e6:95:
                    7f:a2:6d:e0:03:59:4b:48:f5:1d:77:7f:b1:1d:98:
                    53:6f:1e:b5:34:82:8a:fc:4d:81:0d:bf:31:47:3a:
                    df:f5:e3:ac:78:5f:3e:1c:80:de:48:de:16:29:74:
                    a0:b1:e0:66:d5:3d:49:f1:fe:2c:3f:16:e2:9b:1f:
                    0d:e1:99:f7:6d:a9:4a:8f:c2:56:cc:ed:87:65:3d:
                    d9:3e:19:e9:1d:77:52:96:6b:4e:1d:a5:8b:df:ec:
                    36:c7:b3:28:42:fe:c0:b8:bd:27:c4:77:fa:2d:f4:
                    66:49:05:5c:9f:da:61:53:77:e7:db:47:ad:a6:b5:
                    7a:81:37:cb:d4:81:6c:05:d0:32:ef:b1:02:61:e2:
                    4e:4d:d7:32:2f:20:bf:da:5e:3d:3b:b2:7a:cd:2e:
                    30:97:69:5b:a1:10:54:ce:9a:1b:d3:7d:bb:2f:6d:
                    77:9c:9c:06:f6:37:14:a9:b0:e6:16:a6:5a:dd:76:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:64:4C:E2:C9:2B:35:6E:0E:24:BA:D5:04:A4:B2:C1:FC:60:10:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/7dd3e8da-5927-3fd4-9a06-dcf429fd5560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl

            X509v3 Authority Key Identifier:
                keyid:E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4f:81:5e:9b:0e:55:e6:88:69:40:91:2b:ad:c6:26:99:e5:
         4f:a4:f2:f2:f0:b2:d7:d4:7a:e3:8b:bc:84:b3:3f:75:e1:27:
         dd:55:b5:5e:77:3f:24:58:50:a1:c7:99:ef:9e:bf:51:25:fe:
         f8:b8:6a:7f:ae:c4:b7:7a:c2:06:44:b4:d0:77:27:f7:3b:01:
         79:7b:82:a9:81:33:be:24:0e:de:0c:65:9e:8c:0d:2a:c1:8b:
         96:15:39:03:6b:ea:15:64:ee:1b:da:30:87:06:01:dd:5c:70:
         ec:7a:17:64:f7:c7:1c:3c:e3:1d:24:ed:d8:64:db:a4:95:02:
         df:85:a6:0d:e0:da:43:0a:3a:ba:5e:3f:71:77:3c:ed:5c:7d:
         c2:7f:6b:60:a1:9b:c4:41:65:06:90:b9:bc:cd:45:c4:7d:4f:
         e8:5e:12:72:c4:ae:35:c3:95:1c:1c:30:02:60:7e:3c:61:fc:
         a9:38:34:d7:03:e1:c4:e6:45:b3:2b:4a:ac:71:b4:90:5f:e8:
         f4:44:e0:03:a9:e3:d2:7b:2b:d0:f5:c5:01:be:b9:69:8b:ed:
         50:c2:b1:64:e7:4e:80:30:ad:13:7d:32:61:8e:54:fe:c5:89:
         1f:5d:ad:fe:19:5e:19:81:82:7d:df:88:61:c1:00:fc:ac:e9:
         89:c4:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:12 2025 by rpki-client