Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874497d8-bd12-3a45-a9aa-831e9db1d8da.roa
File:                     874497d8-bd12-3a45-a9aa-831e9db1d8da.roa (raw, json)
Hash identifier:          8mmlokV1QSjrVYsd4/KT8/GH/+jDyXEdQb5E1h4VcwE=
Subject key identifier:   F8:BF:E9:7A:6A:8C:F0:CC:91:9D:5B:E4:1A:59:E0:4A:46:D5:27:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD55999E5A0F17386099A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874497d8-bd12-3a45-a9aa-831e9db1d8da.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7016
IP address blocks:        2603:301f:1d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:55:99:9e:5a:0f:17:38:60:99:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=7fedadcc-2ab6-46f7-a172-c8d3024814bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:b5:2f:e1:5e:3d:ec:b0:83:03:9e:8f:05:
                    2e:d0:2b:f7:ce:19:c6:a1:73:f2:ad:cd:d4:37:bd:
                    53:8f:b5:86:49:bf:aa:d5:b8:1e:9a:23:7f:09:23:
                    b7:52:c5:ac:cd:c5:41:2a:7a:88:22:56:33:63:31:
                    e8:51:80:97:2f:ea:e3:65:a8:30:f4:fb:0e:06:6f:
                    97:60:5a:7d:8c:50:95:17:1b:36:68:1e:c7:bf:07:
                    e3:8c:79:32:fa:b5:e7:3b:20:c6:82:80:57:e7:63:
                    e6:61:ac:6d:69:26:59:86:56:c0:5f:39:e8:73:99:
                    c2:9d:04:cc:ed:1f:92:ea:db:42:cc:e4:8d:4a:f2:
                    38:0d:ba:71:2d:bf:d5:5c:bb:3e:b4:be:b4:81:da:
                    e1:61:74:1a:c2:4b:32:a1:03:c9:8b:bd:b8:d4:b0:
                    1b:71:be:87:88:06:65:09:ac:b0:30:94:bb:83:c6:
                    0d:18:ad:a9:c0:be:d6:dd:64:25:22:21:bb:bf:9f:
                    ea:23:d3:f2:f0:19:cb:93:d0:8b:87:54:74:ea:8d:
                    27:08:7c:98:9e:e7:94:69:d8:5c:e9:5c:9a:0d:32:
                    d4:89:6a:8c:0e:2d:bf:7e:a7:10:68:de:a5:87:93:
                    67:66:67:58:f0:07:e1:47:2f:b8:1f:c0:22:02:fa:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BF:E9:7A:6A:8C:F0:CC:91:9D:5B:E4:1A:59:E0:4A:46:D5:27:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/874497d8-bd12-3a45-a9aa-831e9db1d8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:1d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:9f:a5:ed:5a:d3:16:02:5a:ce:74:13:be:20:8e:07:e0:
         52:96:4b:54:d7:ca:0f:3e:20:1f:fe:ff:c3:0b:d9:8e:45:57:
         e7:e9:58:40:fc:c2:10:db:78:6b:24:eb:2d:1a:8b:ce:04:38:
         ab:aa:f1:db:42:ff:ce:b6:4d:45:f4:f1:4e:09:a6:a2:25:d9:
         82:b1:c4:20:60:82:57:60:16:57:ba:38:ef:06:7d:4c:f4:34:
         7e:58:23:ef:49:04:6d:90:0e:1a:9c:86:26:a8:4a:fe:27:f7:
         f0:4a:ed:52:25:82:d5:af:7a:28:9f:fd:6f:85:88:02:e4:ad:
         a4:a9:e9:30:fb:ba:bf:f2:a0:58:da:e8:f1:e8:3b:b0:85:bc:
         b5:1a:6b:d3:55:7d:c5:d0:07:0b:98:d6:c0:d6:c6:c2:f6:f7:
         e9:06:43:80:d5:14:0e:13:6b:34:34:7e:0a:27:5c:5e:61:ee:
         db:d3:ba:d2:58:0e:a9:53:5f:a7:15:16:e3:a5:bf:10:f1:03:
         17:42:11:15:aa:b6:6b:97:23:2e:1d:b8:86:7f:05:9e:a0:73:
         65:47:f5:aa:4c:1a:ca:17:2a:af:da:a0:cf:6d:c1:c0:95:7a:
         6e:9b:85:b2:e6:93:e2:f9:fa:2f:5a:ce:65:58:72:64:f3:55:
         03:97:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:39:59 2025 by rpki-client