Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ddf74b2e-1f52-32ce-a825-0825b9dd1146.roa
File:                     ddf74b2e-1f52-32ce-a825-0825b9dd1146.roa (raw, json)
Hash identifier:          t0TnRGoh9NZIreC22kG+0Mly9k87FsuNc9zFxKkyne4=
Subject key identifier:   59:69:E7:1D:EE:1D:73:C5:25:05:D7:06:76:52:38:A3:32:91:A2:06
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B821CC904E54E9D50049CD680
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ddf74b2e-1f52-32ce-a825-0825b9dd1146.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11537
IP address blocks:        2001:468:1f10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c9:04:e5:4e:9d:50:04:9c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=25a4bcce-432d-495a-8cca-866a151b759e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:fe:00:da:d1:11:55:a1:5f:f8:9e:f3:f5:
                    b7:11:cf:49:a3:44:30:01:c4:3b:a5:05:ad:0c:5b:
                    cd:40:45:38:d9:2c:a4:52:7d:6b:65:d6:30:1a:7a:
                    23:00:db:f3:a9:d7:19:0c:0d:8a:5d:e5:b1:ff:a4:
                    7c:fd:ed:f5:f0:71:10:f0:9b:f8:67:c7:8a:db:ca:
                    38:0b:3f:15:ab:7c:0b:16:65:e4:b6:7e:13:0a:a6:
                    e9:e3:ab:0e:75:80:7b:04:5e:3f:b3:c3:51:0a:a9:
                    eb:f6:1b:62:e5:e2:a3:27:57:51:5b:b2:ad:2e:9d:
                    68:cb:fa:18:fb:74:3b:fc:ce:c2:ab:64:71:25:05:
                    b8:82:97:e9:06:73:84:89:f8:9a:db:27:d1:2c:f0:
                    01:b0:5c:cc:35:19:6e:ff:65:6c:0c:f0:bb:43:54:
                    0a:4e:ed:90:94:55:c8:1c:af:65:03:22:4e:86:5d:
                    a9:1f:c1:b9:fa:a6:65:b9:90:45:12:f1:a6:91:8d:
                    28:c3:8b:9e:a2:f0:a1:02:b2:5d:e5:12:ef:75:3c:
                    52:ec:b1:ee:c9:8c:ca:b0:aa:58:14:20:c3:ea:5c:
                    59:43:cd:f2:ba:12:43:26:99:03:43:03:c6:aa:9f:
                    cd:7d:7d:3b:0d:24:77:15:68:a4:39:96:75:51:87:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:69:E7:1D:EE:1D:73:C5:25:05:D7:06:76:52:38:A3:32:91:A2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ddf74b2e-1f52-32ce-a825-0825b9dd1146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:29:24:86:2f:d6:49:c8:70:2c:8a:76:f0:36:b2:d9:94:
         d2:20:40:92:6f:cf:2d:ff:d8:64:57:22:6b:f5:fd:c6:52:97:
         1e:c4:a7:15:b0:ba:3f:a6:d0:31:58:76:24:99:2a:ee:c0:32:
         e3:05:65:5b:9d:94:6e:9e:0e:a7:21:28:6e:0b:dd:c0:69:34:
         21:29:45:f8:1d:64:71:22:0a:fe:93:5d:f9:36:32:89:44:d4:
         69:1d:0f:dd:f0:93:7a:4f:9e:b2:d6:7c:93:42:47:b9:d3:95:
         e6:5f:cb:e5:2c:ed:95:b8:ae:2e:af:2b:fd:d3:be:00:76:cc:
         8a:31:42:5b:26:4a:1d:75:69:03:82:79:72:51:0d:b2:2e:a5:
         18:97:14:8b:cf:6e:2b:17:ca:e2:95:62:a6:91:c5:7f:11:dd:
         ec:ad:9b:66:52:5c:94:b7:9f:99:9f:34:10:a1:53:57:97:89:
         8a:a1:87:9f:f4:fe:33:a3:b2:5a:04:c9:53:ad:37:d8:e8:66:
         a3:04:f6:99:62:a0:8b:e3:cd:76:43:ef:3a:72:d1:98:4d:70:
         3c:ba:d3:7e:cc:93:7b:5d:22:be:09:af:d7:2f:69:6f:a7:c2:
         39:aa:56:b2:ed:1b:e5:11:ff:dd:b9:8d:5c:f8:b4:a3:fe:17:
         e0:10:76:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:46 2025 by rpki-client