Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa
File:                     6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa (raw, json)
Hash identifier:          hO5ACMvpYAC1V6J4upMEMFsydZhV+MszJt5mJb/6r9Q=
Subject key identifier:   1C:17:0F:5B:5F:D6:B2:C1:60:A9:90:2F:90:F7:54:51:ED:AD:C6:79
Certificate issuer:       /CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
Certificate serial:       010D0C9F4328584B89176482986EBC87F6BCF040
Authority key identifier: 35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     13354
IP address blocks:        2606:fe80:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:64:82:98:6e:bc:87:f6:bc:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c418ca6f-20c8-4f1b-b4f5-e4f805862363
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=06c384c5-2d90-4784-9005-cdff64796e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:9b:35:f8:1b:55:89:e6:e8:b4:70:b4:c0:
                    35:ea:7f:7c:ff:32:60:2c:32:0b:0c:4d:a3:1d:21:
                    94:a5:aa:f9:c3:f3:07:45:02:0c:67:8b:68:f6:f5:
                    ea:33:e4:c2:b8:fd:f8:5b:a0:b7:51:05:19:2e:b4:
                    21:62:00:49:89:09:58:63:6d:73:78:2d:c8:5a:53:
                    25:3d:27:8a:6c:b6:9a:34:dd:14:2b:76:88:88:ae:
                    ce:09:5d:5c:cb:97:0c:ab:b9:96:1a:b9:66:20:d2:
                    06:b2:89:69:c1:c0:e7:44:af:94:10:b2:f0:5b:b0:
                    98:94:5b:00:2f:62:5b:b9:61:23:93:28:91:74:d9:
                    47:55:a7:7e:93:d4:c0:d4:5d:0c:f9:a4:f3:f4:c3:
                    af:4e:74:ed:63:ae:d8:e7:9c:17:e8:5f:df:a5:e5:
                    fc:8a:8f:ed:d4:f3:34:bc:08:69:cc:13:e3:78:ca:
                    0e:01:ab:3d:ef:d5:7a:b4:b3:c3:be:b2:48:c7:9a:
                    2a:78:cd:f6:41:03:fc:39:5a:bb:8a:9f:10:28:66:
                    0d:f2:5d:29:7a:54:ea:a6:0b:e6:76:e7:3f:94:49:
                    20:da:c7:62:d6:2a:dc:45:bd:ae:89:eb:7c:de:66:
                    4c:81:b1:96:62:6e:e4:43:17:b6:03:12:31:05:18:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:17:0F:5B:5F:D6:B2:C1:60:A9:90:2F:90:F7:54:51:ED:AD:C6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/6f3c546a-3c39-3e3f-85d1-a4b7965399d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363/c418ca6f-20c8-4f1b-b4f5-e4f805862363.crl

            X509v3 Authority Key Identifier:
                keyid:35:FA:88:74:F9:80:ED:CD:A6:42:D2:0B:1E:D0:B8:8B:EF:EB:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c418ca6f-20c8-4f1b-b4f5-e4f805862363.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fe80:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:42:ba:de:1a:45:31:b2:28:9e:be:33:5c:b4:f0:0a:b7:48:
         c9:97:0b:a8:d8:60:a6:2d:68:b2:da:47:7f:cb:2a:ff:31:94:
         7d:7c:5c:ff:51:69:79:ce:1c:57:91:8b:7a:21:f3:34:2c:47:
         49:75:d8:0b:af:7a:6b:93:fd:c2:cd:2b:d7:fc:fa:1c:f0:32:
         c5:ed:0c:e6:0a:05:62:3b:c7:67:7b:78:b5:cd:68:e6:85:d3:
         fd:a4:15:12:b4:b3:34:94:3c:93:e1:6c:ab:00:f9:2e:bf:a0:
         87:ba:4e:f1:80:8b:4f:80:37:66:f8:ae:20:b4:3c:c1:ea:23:
         64:a8:32:17:27:12:55:aa:64:81:9a:9d:a2:a7:eb:5f:58:47:
         7e:ca:9a:78:54:c8:42:d0:78:ce:4e:aa:55:f1:5b:b4:a5:d5:
         9a:c4:3c:72:db:df:cd:25:ee:f3:40:45:01:38:48:82:4b:7a:
         34:a8:58:e6:18:fc:00:a0:28:f4:99:9e:1b:12:e1:87:c8:f1:
         6e:fc:61:5a:88:14:8e:6c:08:ec:3f:ba:05:b1:37:e8:ae:a5:
         65:62:32:d5:7f:a2:7a:f1:de:fe:f5:84:e9:56:9b:89:b5:18:
         89:21:d7:66:97:45:30:0e:af:b6:cf:2e:87:13:79:54:52:12:
         2e:54:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:31 2025 by rpki-client