Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
File:                     13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa (raw, json)
Hash identifier:          BQwlvxO0vJ7uIhXwEhAXcTmZhnVqio7QxnCSFCMj0x4=
Subject key identifier:   5E:73:56:CC:3E:8C:88:0E:EF:BD:37:6B:9B:83:A0:56:B4:39:D4:5B
Certificate issuer:       /CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
Certificate serial:       010D0C9F4328584B80B7654B92077D53996B45C0
Authority key identifier: 00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     395460
IP address blocks:        2620:6:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:65:4b:92:07:7d:53:99:6b:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d16ad3-c826-4e42-803d-1ded6b3f1a59
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=a168a58e-2c44-48bf-b0cc-5ceb44fcfbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:c7:67:9c:1f:c9:34:e1:52:de:b0:18:76:
                    42:ee:d0:86:49:1c:09:93:fb:13:e8:03:2b:02:ec:
                    2b:51:70:d0:ff:80:1b:d1:dd:c6:e3:da:43:44:38:
                    25:99:36:20:20:cc:67:b7:78:62:15:28:6b:e0:29:
                    1c:a8:41:99:4d:fb:d9:cc:a9:d5:5f:6b:70:e1:32:
                    20:4d:17:7d:fd:39:4a:c7:34:04:2f:2c:d0:95:eb:
                    32:88:dc:27:a0:0c:71:54:ba:e6:59:25:f0:91:2b:
                    68:9e:4c:5b:40:9b:ed:a2:74:dc:39:66:b8:b0:57:
                    9d:e3:ab:87:e7:04:78:c8:82:55:88:ef:bd:0e:4e:
                    1f:7a:3d:6e:e6:78:08:95:96:77:0d:3c:37:61:dc:
                    e6:12:08:a5:e8:5e:4a:26:96:37:46:1b:99:37:67:
                    0d:61:a2:87:46:65:e6:8a:6d:7a:88:e0:58:73:36:
                    cc:09:58:ff:99:b5:b9:f5:e0:eb:a3:bc:bb:10:26:
                    54:04:30:41:94:ca:6b:b9:4d:be:6b:75:df:a5:c9:
                    2d:22:80:76:b3:de:98:86:8e:17:61:ad:e5:cd:56:
                    ff:30:36:b7:04:64:ca:60:d4:78:47:31:65:5a:0d:
                    07:cd:bc:c2:f9:57:38:39:a4:19:1a:65:f8:e5:95:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:56:CC:3E:8C:88:0E:EF:BD:37:6B:9B:83:A0:56:B4:39:D4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/13ad39e8-6b21-3b32-8a7d-df7dab58b5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59/30d16ad3-c826-4e42-803d-1ded6b3f1a59.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:18:C3:D4:6F:29:36:A0:4F:E7:64:D8:3F:BD:A1:83:53:06:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30d16ad3-c826-4e42-803d-1ded6b3f1a59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:ef:fd:38:ef:7d:9b:60:bc:99:c4:1e:c9:a8:a6:9c:d4:
         b8:94:dc:e0:0c:b7:1f:63:69:1d:ee:40:fa:bf:16:c1:b2:04:
         a9:7b:fc:42:a0:ca:22:a1:be:ce:c9:5e:b4:ba:86:9e:2c:2c:
         e5:62:27:21:16:97:f4:49:28:56:f4:79:ac:fb:db:d1:dd:99:
         a0:e2:3f:4a:53:f5:79:bf:88:32:77:69:6e:1b:21:93:82:be:
         8c:2d:2c:e2:f1:94:ab:ca:7f:41:18:c6:5f:69:e7:95:e3:48:
         bd:b4:7e:d0:09:99:e5:98:0f:c6:59:9b:58:8e:b4:bf:5e:8e:
         79:0f:bc:a5:b1:b7:c2:97:6e:a8:6d:80:16:51:69:47:1e:b9:
         7c:73:e9:7e:7a:d9:ec:fa:95:b8:cc:49:19:f9:f9:d5:ca:7b:
         39:ac:98:01:b8:25:5f:24:fe:72:8d:64:10:28:b6:86:28:de:
         13:96:98:43:1e:1b:1f:9d:80:df:af:b5:ef:a4:db:29:60:41:
         a8:ef:a3:9b:14:90:a6:11:7b:af:c0:a2:be:0c:57:5d:27:57:
         5e:f7:2d:48:55:31:b9:0c:24:d2:ef:d7:04:8b:60:ee:54:cc:
         81:4e:01:59:fe:ab:5b:a6:ed:fa:d3:d0:2b:25:ce:2f:1f:0f:
         4e:85:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:54 2025 by rpki-client