Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa
File:                     851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa (raw, json)
Hash identifier:          Hr9bTTgMqmQJ2Gmw+rgkNuimvstiyCjm54Q7VCHGVLY=
Subject key identifier:   A6:89:46:5D:97:05:76:EB:6C:01:1D:1D:5E:95:BA:87:DF:E4:51:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8A13C55221538878DB200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        2601:409:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:a1:3c:55:22:15:38:87:8d:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b17b8f95-9a8e-4d02-a9a8-1a6fd9efff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:c7:a3:f8:d0:15:df:ba:8b:00:61:4d:28:
                    6e:74:7e:73:44:af:d2:82:5c:c8:6a:96:c6:cd:d5:
                    4e:94:0a:4e:b2:43:ec:32:4b:49:ed:b8:61:86:22:
                    12:8e:71:84:31:99:2f:9f:9c:2d:a2:98:5e:2c:35:
                    05:23:f8:6f:22:cd:33:44:b4:ea:21:ed:72:93:99:
                    38:3e:a1:65:e4:17:f0:81:89:38:d1:aa:88:41:07:
                    df:fd:2e:9e:9b:51:62:ca:c7:5e:6d:48:8d:28:eb:
                    ee:bf:62:97:b1:2a:d6:48:30:32:72:19:88:2b:3f:
                    3d:16:e0:ef:22:1f:2b:ae:a4:24:f5:8b:58:a9:51:
                    40:6c:4b:1e:0c:87:44:07:a9:47:11:28:62:96:13:
                    9c:32:75:f0:d5:9c:a4:79:dd:1d:a8:a9:3f:28:4d:
                    fc:2b:25:d6:91:3b:de:8a:5e:a7:d8:7e:e2:21:cf:
                    e3:83:28:82:ef:b9:23:e2:ea:69:39:4f:35:62:ae:
                    12:04:2e:34:6b:27:10:1d:c0:8a:90:91:e6:1d:7d:
                    19:2f:f8:c1:db:1c:a4:04:68:8b:e1:0c:5c:de:db:
                    c6:46:a6:a5:23:ab:c2:af:75:80:0f:d3:77:7d:99:
                    b0:4d:3d:c6:3d:4e:b1:73:b9:bb:17:c6:d8:35:3c:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:46:5D:97:05:76:EB:6C:01:1D:1D:5E:95:BA:87:DF:E4:51:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851d5bf4-46d4-3d0a-b46a-39a545e0c6a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:409:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d4:06:07:59:14:b8:a0:90:de:de:37:d4:32:e1:2f:fb:f4:
         bb:d8:27:15:71:04:47:69:c4:50:58:22:a3:82:b5:82:9d:b8:
         fe:d0:00:34:dd:ef:bf:11:a6:5a:e8:94:41:a8:56:db:0a:7c:
         5d:d4:49:6a:6f:7f:52:2b:56:ae:c7:14:4b:b5:1b:59:44:ee:
         1b:e0:75:4d:9a:52:8b:1b:d1:33:1d:f1:7a:1a:89:f5:df:21:
         44:89:d5:b3:a5:eb:84:27:15:80:b4:98:b9:f4:42:50:16:06:
         61:83:a8:f6:8b:39:2c:4c:1d:04:83:e5:84:e8:f6:54:f8:f4:
         2a:ef:57:d8:33:a5:e4:96:61:53:71:af:be:3a:c5:bd:0c:c3:
         9b:75:ab:1d:b6:1b:25:93:89:f5:97:bd:0a:57:85:75:4c:ea:
         20:85:85:23:bf:96:7d:41:fd:6c:a1:4a:2e:12:40:60:40:fd:
         cf:1a:54:9b:9a:4b:dc:3c:39:af:97:03:a7:e2:2c:87:fa:87:
         08:9a:67:60:dc:e8:81:8f:ff:d4:3e:66:fc:f3:3f:3b:f0:e7:
         55:33:df:74:54:f6:c9:7a:8f:2b:e9:6f:57:89:8b:3e:14:9e:
         af:a1:de:cd:3b:b4:48:46:ca:46:4c:3e:81:b5:2d:a1:90:3b:
         a4:e7:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:23 2025 by rpki-client