Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94a4fc9e-92a0-3d95-a2ec-a48d5007daac.roa
File:                     94a4fc9e-92a0-3d95-a2ec-a48d5007daac.roa (raw, json)
Hash identifier:          CFTcIUEpstwaB7x8iqPDAdBzZl1iaS958D4ZwjpUBKo=
Subject key identifier:   09:52:96:71:CB:6B:38:8A:FC:BD:36:C7:1F:A0:0B:A3:BD:58:D2:4A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B05E1427CB74EF72845C934C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94a4fc9e-92a0-3d95-a2ec-a48d5007daac.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     3939
IP address blocks:        2001:418:1401:17::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:42:7c:b7:4e:f7:28:45:c9:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=01524c65-5d00-45a8-bc5e-8ad7de9147e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e0:ac:9c:92:9b:c1:a4:04:42:d2:a9:5e:a9:
                    d6:a2:11:91:90:91:11:7a:0a:5a:47:79:29:68:47:
                    7f:d0:c4:05:50:74:65:ef:67:c9:57:fe:e6:e3:be:
                    eb:34:3c:74:14:dc:1d:bc:da:37:03:79:f8:b7:31:
                    fb:d0:c7:0f:da:39:9d:fa:db:13:6b:6f:c6:52:46:
                    97:a3:b4:e0:be:a1:54:c4:83:a6:54:b7:e0:5f:f5:
                    ee:43:c8:9c:d9:3c:84:3d:70:4a:da:d0:c6:f4:9c:
                    43:b4:d2:b4:b5:0b:88:3d:41:db:a9:68:3c:8f:59:
                    25:68:57:c9:2f:df:bb:c0:f9:90:43:a1:02:34:da:
                    98:fa:b7:14:72:05:64:1f:bb:df:64:04:d5:4b:52:
                    3b:69:14:0e:b5:ca:f6:e2:ee:fd:56:a3:e1:f5:21:
                    fd:78:90:37:83:72:24:e8:12:7b:76:f3:0f:30:4c:
                    ac:4a:2e:8a:1b:ce:28:21:fa:4e:11:a3:55:e5:09:
                    41:32:b0:df:f5:f7:4c:3f:c5:74:7d:eb:a8:dc:ae:
                    c2:1f:39:44:4e:be:db:f1:ff:85:c2:8c:6c:14:4b:
                    c3:54:8b:99:59:13:9f:b5:4c:b0:44:2f:3c:a7:89:
                    c0:d3:e0:a1:40:7d:49:fe:e7:43:a7:cb:fd:91:9a:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:96:71:CB:6B:38:8A:FC:BD:36:C7:1F:A0:0B:A3:BD:58:D2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/94a4fc9e-92a0-3d95-a2ec-a48d5007daac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:17::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:9e:67:08:f8:be:a4:67:55:68:82:63:2b:8d:1e:1b:01:
         c4:01:d2:32:2e:fc:b6:ea:36:de:c0:55:a2:c9:4c:1b:63:aa:
         5a:cb:a5:09:57:91:b1:4f:39:c5:2f:43:a7:c6:f9:02:f5:11:
         d7:0a:25:80:1b:4b:e5:e2:80:a5:cd:ab:57:eb:c5:5a:27:63:
         c9:90:2f:85:32:61:c5:1f:d9:38:65:0c:71:c5:d6:20:7e:3b:
         06:99:f7:ef:86:77:44:cd:bc:33:37:c0:ec:1d:bb:d0:01:04:
         8b:a6:b1:99:df:15:a2:e0:de:50:89:e8:1d:b0:a1:7a:04:fc:
         8a:31:94:80:36:f3:0e:17:0d:5f:19:37:f7:fe:b1:89:64:33:
         69:e7:7d:bf:03:99:78:d6:de:d2:51:bd:01:d3:9c:2c:85:91:
         f0:36:fa:cf:1e:be:0a:15:71:ff:48:b9:9d:e5:a7:5c:16:fe:
         67:44:fc:c0:e4:bc:02:10:bb:48:47:1e:d4:a9:44:99:f1:f7:
         6c:9a:59:03:da:85:81:85:7a:bc:88:97:d3:8b:dd:07:8f:5d:
         9b:7f:4d:8a:ea:42:91:23:2b:3c:f2:88:ee:5b:93:48:cc:d5:
         e5:10:33:b3:20:c8:1f:2e:10:af:37:be:a8:3a:7c:5d:0c:67:
         fd:3c:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:11:36 2025 by rpki-client