Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/762ac600-3c11-3559-a388-e0e81aff65ca.roa
File:                     762ac600-3c11-3559-a388-e0e81aff65ca.roa (raw, json)
Hash identifier:          ucYShGa8fThZNLjfnjADPR8seXlovIUa3QGyG31BqJE=
Subject key identifier:   D5:09:39:98:87:E2:A3:FC:EF:1C:DA:68:8C:A3:70:C2:3D:8A:27:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7B07AC6B5389CAE164300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/762ac600-3c11-3559-a388-e0e81aff65ca.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        2001:558:5028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:b0:7a:c6:b5:38:9c:ae:16:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=22e5d5fa-d8c2-44ca-b544-b5e7c8e86084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:cc:e3:b2:99:35:dd:5e:5b:cb:17:58:25:
                    e3:f3:26:0b:c4:b3:4a:d8:3a:9e:3d:6c:9f:d3:7c:
                    9a:7f:b0:f3:1d:e6:59:e8:b8:3f:5f:8e:6a:5a:65:
                    b6:99:96:ac:8f:4a:fb:8c:c0:85:48:a5:80:ec:08:
                    5a:84:12:b7:db:61:82:58:35:eb:41:d1:7b:1f:0c:
                    ed:27:68:7e:9e:a1:9d:d6:e0:6d:ab:f0:95:e2:28:
                    6f:52:70:ad:a0:86:a2:d8:6a:89:a8:3c:f0:ef:cd:
                    1b:61:ab:5f:e3:dd:ae:97:82:8c:e3:84:c4:f8:8e:
                    bd:7e:81:16:5d:f0:ae:74:e9:e4:c4:45:44:0d:ae:
                    e8:e6:b3:7a:38:f1:cb:d5:fb:40:78:4d:9a:56:0d:
                    d2:43:6c:3d:df:17:e1:02:23:1e:0c:a0:e3:89:91:
                    6c:3a:31:71:21:cc:54:5a:f3:42:d3:48:8a:4a:24:
                    da:3f:dd:e2:95:cd:28:07:0d:c0:6e:71:b0:4b:da:
                    47:dc:74:40:80:5b:c1:f6:8f:e1:9a:e5:71:e9:ed:
                    62:0c:0f:d1:16:33:62:0f:ed:b3:87:2b:30:c7:1c:
                    d9:4c:cc:f4:33:27:5b:bf:aa:e7:c9:bc:45:97:63:
                    73:e0:e8:bb:b5:84:a9:00:60:dd:38:47:3d:53:8f:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:09:39:98:87:E2:A3:FC:EF:1C:DA:68:8C:A3:70:C2:3D:8A:27:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/762ac600-3c11-3559-a388-e0e81aff65ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:5028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:2b:01:66:ea:fb:ba:12:3c:0c:a7:19:d0:76:f4:e2:72:
         a2:d1:72:8b:12:fa:be:f3:45:93:7e:4c:94:b0:51:67:b1:de:
         56:01:fe:8f:d2:62:3f:e9:ca:8c:1d:d2:7c:82:89:66:5a:7a:
         09:36:ee:17:6b:70:7d:55:d2:ad:2f:85:59:9a:73:48:d8:a6:
         4a:c8:c7:9f:69:e0:3d:06:4f:95:ff:06:15:1d:cd:70:81:23:
         15:0d:72:91:73:a7:a1:46:57:72:bb:60:ad:36:0c:08:12:74:
         5d:92:4b:16:32:91:62:bf:ed:76:97:94:37:49:c0:06:95:5b:
         91:23:55:d8:cf:fd:65:60:99:89:dd:95:85:df:3c:ad:79:29:
         d1:4a:20:83:83:d5:3c:06:40:60:1a:09:4e:ba:e5:74:fc:af:
         a1:fe:3d:6f:6e:c8:61:4a:91:11:11:14:2f:e9:f2:e5:17:1e:
         27:ce:c8:c6:97:3b:08:f5:e1:a7:54:a8:2b:9c:69:0f:f3:a2:
         6f:59:a4:af:d4:07:fc:37:9e:24:cc:18:55:80:80:e5:2f:8b:
         4d:95:4a:1f:b0:64:91:98:40:27:b3:47:cb:45:81:d6:93:81:
         24:d2:64:43:df:22:ad:2c:2d:ff:e6:57:d7:d8:e6:0e:a3:9b:
         20:4d:83:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:33 2025 by rpki-client