Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ab99a877-7dc5-350d-9a54-eefc90bbdc9c.roa
File:                     ab99a877-7dc5-350d-9a54-eefc90bbdc9c.roa (raw, json)
Hash identifier:          a/LlCZaBkJL+GWJzvV2zjzPXryAAvz9OIzNu+nUyF5g=
Subject key identifier:   D1:2B:93:1F:FA:3E:3D:69:42:5D:52:F8:66:09:98:2F:C4:21:A6:70
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B821CC1D013C4B7AFF6F144C8
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ab99a877-7dc5-350d-9a54-eefc90bbdc9c.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11537
IP address blocks:        2001:468:2610::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c1:d0:13:c4:b7:af:f6:f1:44:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ef582861-15ba-462f-a3d9-5847259eebb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:f1:73:a3:2a:57:92:0d:d5:82:32:b8:8c:
                    c7:72:9b:a0:48:1a:63:a0:1b:3f:0d:97:17:ef:bd:
                    67:ae:b1:7f:54:f4:d3:8e:c7:1f:6a:4a:64:36:26:
                    30:6f:8d:ba:49:10:45:90:35:29:a5:85:0a:e0:5a:
                    22:94:49:c9:ec:f6:3d:6f:45:a6:ae:3f:64:c7:93:
                    26:a9:de:43:75:bd:2e:65:ef:a7:ba:a1:de:77:33:
                    77:1f:20:0d:46:4b:63:d1:a4:7d:65:9f:7d:7c:e4:
                    ee:59:2f:00:b9:7e:7d:62:0f:03:bb:86:e7:82:15:
                    3f:36:f7:cb:e8:4b:ee:17:7b:0e:4a:4b:6a:ed:8a:
                    af:26:ed:a6:fb:cf:26:fc:06:c7:17:2d:87:70:83:
                    49:8b:b4:7a:ca:4b:e0:7b:ef:de:ee:8b:e9:78:82:
                    40:54:c4:5f:1a:c0:1c:5f:b3:ae:c8:dd:e0:bc:78:
                    3d:b1:73:41:2e:aa:f9:91:94:cd:49:01:84:4f:8a:
                    a7:39:8a:6d:a2:a9:cf:4f:df:ed:e4:2e:5a:a3:03:
                    1b:3a:1a:0d:fc:bd:ba:75:fd:e6:d0:ad:34:3b:39:
                    00:2f:55:52:1d:0b:82:4e:2e:91:3c:12:c4:b0:86:
                    e6:2d:ff:74:06:b6:3c:c2:05:8d:60:d8:40:48:85:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:93:1F:FA:3E:3D:69:42:5D:52:F8:66:09:98:2F:C4:21:A6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ab99a877-7dc5-350d-9a54-eefc90bbdc9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2610::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:2c:3d:84:f1:1d:c1:8e:06:12:ce:34:81:1f:4b:e7:fc:
         16:4c:34:1c:06:22:9f:54:ca:35:84:59:0c:1d:23:a7:52:11:
         90:42:bb:a3:42:27:c8:f1:40:3b:88:80:1c:7b:fd:bf:13:5c:
         63:35:b6:9a:0f:28:89:94:d4:32:cb:db:99:03:0e:42:86:ad:
         1d:38:0e:4b:3f:53:56:49:a8:b5:2b:b0:86:97:18:c5:58:ec:
         d3:6e:7e:58:f6:98:a8:b0:a7:96:f4:ec:4a:b9:60:c2:93:09:
         02:fb:c9:7e:eb:a3:bb:00:b0:0a:29:d1:19:17:74:c9:bf:e7:
         7c:5f:59:23:60:30:35:8a:3a:48:85:a3:a5:98:3e:fb:be:b4:
         40:da:87:ee:3b:4e:90:b8:d0:c5:9d:b2:0c:69:29:78:47:86:
         9f:4e:73:da:ca:d6:fb:f4:60:ed:e2:7a:a2:77:dd:23:9a:05:
         a5:d0:99:62:0c:42:2e:12:d1:3e:14:12:60:ee:f4:e5:f4:42:
         1f:17:7f:49:05:c5:8d:c2:11:a0:b7:32:45:7c:27:26:47:47:
         f5:ee:06:3b:fa:6e:95:2c:41:70:0e:73:b3:2d:10:47:4f:da:
         99:67:a4:60:74:f8:4c:c4:3f:c7:3d:1a:2a:c0:f9:19:b2:7c:
         bc:a7:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:45:09 2025 by rpki-client