Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6aacb32c-5b6f-3866-84a4-5031a0dffaec.roa
File:                     6aacb32c-5b6f-3866-84a4-5031a0dffaec.roa (raw, json)
Hash identifier:          PUSNge5cz7eDE0ON/NazOFpTKLNLFKYuVccDiRL4TW0=
Subject key identifier:   9A:18:A0:FB:53:70:BF:9D:9A:EC:63:53:BF:44:0D:8F:7A:51:31:53
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B8D477C6506AFF7A2171F3CA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6aacb32c-5b6f-3866-84a4-5031a0dffaec.roa
Signing time:             Fri 17 Oct 2025 13:00:39 +0000
ROA not before:           Fri 17 Oct 2025 13:00:39 +0000
ROA not after:            Thu 15 Jan 2026 14:00:39 +0000
asID:                     19905
IP address blocks:        2604:2d80:f000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:47:7c:65:06:af:f7:a2:17:1f:3c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 17 13:00:39 2025 GMT
            Not After : Jan 15 14:00:39 2026 GMT
        Subject: CN=64935c6a-3368-411e-9dc0-d8b615fc8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:dd:cf:85:8c:00:ff:70:f7:ca:7d:5c:03:
                    74:3f:99:a7:98:b2:e0:89:00:d0:ef:07:5d:03:e0:
                    23:80:0a:de:f0:19:5d:d6:4f:98:02:7e:1b:d0:d3:
                    f0:4f:1b:19:ea:fa:d0:80:a3:35:f3:25:ba:7a:fc:
                    8f:cb:b5:e8:22:f6:8c:f0:03:b9:e1:3b:26:55:9d:
                    49:e7:2e:2c:03:bb:72:10:25:34:9f:a7:78:a9:fa:
                    10:ef:81:f2:ab:0f:1c:00:b8:ae:5b:da:e8:55:30:
                    cc:53:0a:2e:da:a1:6f:f3:c5:43:5f:c6:c6:8d:22:
                    37:97:fa:2a:3d:38:6d:30:f6:97:b6:54:34:94:40:
                    c7:b1:eb:8d:4e:73:0f:7a:f8:a7:6c:bf:9f:49:4a:
                    50:47:52:43:37:61:a5:43:49:52:79:26:96:08:39:
                    53:a1:07:a7:fd:f8:eb:17:4e:f5:7c:9a:78:30:93:
                    5e:ea:e7:ac:16:96:eb:e2:71:91:26:fa:ea:9e:c5:
                    9d:20:63:71:e1:9f:ec:a4:e6:04:64:c3:f0:a1:39:
                    90:2c:61:3b:36:7d:36:e7:ce:75:60:da:d1:07:02:
                    43:d9:18:69:9c:4b:7b:6c:e4:a8:65:02:59:ae:6f:
                    0c:72:5a:f4:56:a8:06:ac:2b:6b:9d:fd:24:6b:13:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:A0:FB:53:70:BF:9D:9A:EC:63:53:BF:44:0D:8F:7A:51:31:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6aacb32c-5b6f-3866-84a4-5031a0dffaec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:f000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:ba:f9:77:5c:ef:49:b6:8e:63:32:b4:bb:dc:5c:1a:64:
         dd:64:9d:fb:a2:1b:af:bb:25:51:36:d5:bf:50:a6:6e:fc:dc:
         27:5d:06:a7:94:ec:cf:1c:28:6d:00:da:d0:33:c7:55:b7:30:
         63:02:be:d2:81:12:f4:c0:18:2c:b8:9b:86:74:99:cc:af:68:
         9f:0b:cb:ee:6a:f2:76:4b:dd:23:f2:f4:ad:1f:a6:f0:7c:7d:
         61:91:2c:e2:65:ef:1e:6a:d0:1b:79:32:4a:68:b9:27:09:4f:
         81:80:c1:39:62:22:7b:90:0e:ba:a2:51:e6:bb:4d:38:9c:98:
         e9:6e:00:fd:83:80:56:5e:80:ee:35:d4:b1:2c:c0:2d:5f:4f:
         da:fc:d2:6f:ca:3b:77:c0:99:1c:b7:74:48:04:a6:20:b5:1b:
         fc:ca:a3:bf:d5:50:ab:5d:f6:53:e2:97:55:12:ae:b3:e8:13:
         9c:bd:8d:b1:a0:9b:99:6a:70:62:6f:a7:44:20:dc:76:30:e4:
         7d:08:b7:31:1e:2b:ad:f1:df:23:3c:b9:c3:61:23:34:aa:b8:
         96:15:f9:cd:d3:17:46:13:b5:9b:79:21:39:0d:2a:d0:4a:0e:
         db:76:2a:a0:53:ce:fa:11:2c:c0:81:3b:c1:2c:3f:a7:90:41:
         54:e4:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:44 2025 by rpki-client