Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa
File:                     9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa (raw, json)
Hash identifier:          3YuDdNQ3tMv5OurO9eiYoHu8sG+9ht0SRVIuVI7Kvic=
Subject key identifier:   E7:1C:FA:FC:F1:C7:95:53:68:1C:4A:C2:30:C2:C4:49:A0:63:4C:E8
Certificate issuer:       /CN=fdd9493c-4150-4957-92ed-ba65ee3083d6
Certificate serial:       010D0C9F4328584BBE405DC8F006A3E1F812E180
Authority key identifier: C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     401816
IP address blocks:        2602:f5ee::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:5d:c8:f0:06:a3:e1:f8:12:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd9493c-4150-4957-92ed-ba65ee3083d6
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=39a5a703-343e-4a04-9e71-75b1df730457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:ac:79:d1:77:7d:c7:2d:3c:b3:42:fb:d2:
                    45:61:4d:f7:94:de:6a:0d:d4:f4:09:4b:5b:ba:28:
                    a3:6e:75:53:4e:af:cd:d5:47:44:73:1c:fe:56:f3:
                    e4:50:89:fd:2b:59:d0:58:a8:4d:97:e2:55:c7:3f:
                    6c:b8:e6:5d:3c:c9:50:77:78:c5:b8:98:df:52:96:
                    9c:06:8a:55:7d:17:3b:ab:fe:82:cf:00:32:4c:d3:
                    2b:07:81:1a:27:64:9a:f8:55:c9:e7:2f:d7:12:7d:
                    27:da:44:38:9a:29:db:dd:4b:df:4d:50:aa:05:8f:
                    6c:dc:ea:bb:b3:17:23:4e:45:11:48:b9:3e:4b:91:
                    b8:2e:07:2d:3a:9f:f3:07:16:96:37:3b:1d:d6:b2:
                    fa:0d:c0:a5:46:bb:7c:c1:96:9a:08:75:32:46:59:
                    63:c5:cd:48:77:e0:6a:d8:a2:c8:24:33:93:70:ac:
                    1e:26:c5:97:24:54:13:11:fd:01:7c:e0:7a:53:ca:
                    f6:43:83:b6:b0:ca:c2:96:13:07:6e:e6:ee:e9:e3:
                    b6:45:9f:19:05:bf:eb:03:c1:35:d0:39:29:ee:8d:
                    01:6b:37:ac:4a:bd:fc:51:1d:26:fc:13:6f:18:a9:
                    d2:78:05:e6:90:2d:84:dd:92:79:5a:ce:10:27:ef:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:FA:FC:F1:C7:95:53:68:1C:4A:C2:30:C2:C4:49:A0:63:4C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/9312e5c8-9ff6-31ae-b191-e4a8c65a33dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6/fdd9493c-4150-4957-92ed-ba65ee3083d6.crl

            X509v3 Authority Key Identifier:
                keyid:C9:56:85:07:37:1E:A9:D2:B8:2A:31:A7:7A:A7:11:29:A7:AF:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdd9493c-4150-4957-92ed-ba65ee3083d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:52:43:7c:5c:4c:07:f0:88:2b:2f:44:42:af:b6:d6:21:bf:
         69:13:54:8a:de:ff:09:86:2e:fb:95:82:58:9d:a5:a1:80:6c:
         a8:52:19:67:8e:83:7e:09:42:1c:6b:e9:a3:f7:ea:a5:7b:95:
         3c:ee:d2:92:18:8e:28:56:3c:91:d7:5e:29:a6:8a:81:75:3e:
         96:33:bf:59:fd:e8:33:e8:c9:67:56:ae:e1:1d:4c:9d:75:2b:
         5e:61:fb:34:d8:83:f6:58:7f:63:e5:7e:87:8e:39:2a:46:cc:
         13:34:bf:20:e7:26:57:a0:b8:43:a3:54:89:58:68:a8:20:77:
         ab:6a:d4:a4:d7:37:aa:f6:41:01:f7:55:c4:df:28:b6:a4:bd:
         89:a4:ae:b4:2f:8a:a5:f2:86:e9:70:5a:3c:02:1b:44:42:aa:
         58:bd:06:36:8d:bc:9f:81:af:d4:66:60:ee:84:1e:1c:a1:21:
         6f:d1:12:d6:f9:53:fe:e5:60:86:53:11:47:d6:31:4c:06:b6:
         b3:c7:4f:99:f3:4b:2e:5d:2c:94:55:1b:d9:e1:f8:2e:98:82:
         6c:31:d8:b2:d8:17:b1:3b:08:c9:47:fb:c5:d5:ad:04:d0:0a:
         dd:f8:8f:7b:81:b7:72:3d:d7:1a:6d:57:0e:92:c8:2c:69:2e:
         2f:a4:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:54:21 2025 by rpki-client