Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee70a1c-1ad0-3322-a44c-76c749df6706.roa
File:                     8ee70a1c-1ad0-3322-a44c-76c749df6706.roa (raw, json)
Hash identifier:          XyseZoaOq6kNnv6sg2NK8EIJOxMNaqUeitf+IgqkHDA=
Subject key identifier:   1E:11:32:9F:32:BB:23:E6:4A:21:40:08:13:BE:8C:02:74:B1:24:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB74B2B8C0BCB56DCA5EAA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee70a1c-1ad0-3322-a44c-76c749df6706.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        2603:3011:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:4b:2b:8c:0b:cb:56:dc:a5:ea:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6c51f89b-2c26-49ee-8da2-f0c2a81b7a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:80:04:7e:f5:7b:89:76:ad:fb:97:9a:69:6c:
                    e7:ac:cf:7a:9a:1c:02:8f:a2:ef:ec:69:49:7e:4e:
                    e5:c5:10:fe:15:b0:3d:12:95:35:e5:26:63:82:65:
                    de:22:a1:ea:ea:09:1a:50:66:a4:d1:d7:8e:fa:b3:
                    23:e4:f9:50:76:dd:b4:b0:53:b4:ce:55:23:6a:6d:
                    e3:77:18:46:b7:fe:81:a0:7e:88:c8:1a:e0:ae:9e:
                    32:44:28:02:da:d8:9f:3e:c9:b4:8b:5e:e4:d5:89:
                    19:df:94:a1:fd:fe:45:c1:3a:1d:ee:44:88:0f:17:
                    79:27:21:7b:20:fd:00:00:ea:4f:cc:ec:bf:e4:0d:
                    81:57:49:20:0a:f9:5b:15:d7:39:62:aa:70:f6:50:
                    9a:d7:65:ba:58:7c:83:f8:3c:1d:65:b6:7b:6b:7e:
                    33:15:08:52:64:c8:49:98:4a:3e:4b:58:92:40:99:
                    2e:d6:12:f8:2f:66:99:85:2f:66:c0:9c:45:ce:d1:
                    30:90:99:ed:11:61:43:4c:cc:f2:16:64:8c:bb:94:
                    73:3d:f9:6e:7d:85:72:64:af:54:29:9d:c3:91:ac:
                    9a:46:cb:3b:c2:28:9e:35:df:56:0c:71:f0:10:fb:
                    85:f6:ae:c4:4f:c6:9c:fc:ac:4c:5a:59:c4:11:fa:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:11:32:9F:32:BB:23:E6:4A:21:40:08:13:BE:8C:02:74:B1:24:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ee70a1c-1ad0-3322-a44c-76c749df6706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:cf:9b:7c:c1:51:ef:51:5f:b2:af:04:1a:41:eb:1d:bc:
         1d:ce:94:c8:2b:2e:9d:1f:ea:4e:3e:89:28:df:62:31:8e:2b:
         86:fd:e1:c8:5d:e9:49:87:73:b8:cb:62:a7:80:9f:d8:7b:c5:
         c0:b8:c6:b3:c1:be:ea:c2:18:b3:31:64:49:3d:a5:42:6b:14:
         f2:37:69:42:3e:c6:6d:0b:67:2a:8b:44:c1:68:07:13:11:f3:
         79:1c:f1:ea:56:3c:68:93:74:bd:88:c2:e5:b9:cc:c2:e4:98:
         49:6a:91:26:5e:6b:64:de:73:7b:cd:47:46:0f:4a:3a:bc:b0:
         d9:ff:0c:6c:c6:41:80:64:f9:79:c2:80:f3:7a:56:d0:b4:b8:
         f0:2a:cc:41:ef:13:45:cc:ea:2c:1a:7c:67:fb:61:76:30:28:
         86:78:0d:ea:98:f3:dc:f4:40:5b:f2:1a:62:17:e3:19:25:81:
         e6:fc:86:de:a2:de:a1:d6:28:8b:e5:15:07:57:ff:7a:89:c3:
         8b:30:74:f4:86:38:12:ed:9a:41:8e:e1:dd:bb:cf:a9:9c:d9:
         81:6b:18:e7:d4:9f:16:15:f7:2f:88:65:18:d8:ac:89:30:0e:
         af:4b:03:92:76:f1:22:2d:a7:50:80:6f:48:b2:40:8e:dc:73:
         b4:2d:05:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:32 2025 by rpki-client