Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa
File:                     5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa (raw, json)
Hash identifier:          mINmGzLm3UU91dV5zfKxoeDMzHbqsnXnpdQ+1esEq1E=
Subject key identifier:   59:2F:57:E8:82:D8:C0:61:76:BD:7A:3B:40:91:5F:5B:C0:2D:48:14
Certificate issuer:       /CN=d41a3f41-d9b3-4528-8251-900156f4efac
Certificate serial:       010D0C9F4328584B821CCB2528D73B123542CA80
Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14525
IP address blocks:        2604:c0c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cb:25:28:d7:3b:12:35:42:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=254336f5-70f9-4086-9793-d860421a802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:82:b1:47:24:54:3f:19:c0:da:ef:db:e2:
                    da:44:bd:3d:1d:36:35:36:d2:85:de:60:3b:c2:c3:
                    fc:78:c3:07:a2:fe:86:43:10:31:ac:bd:97:d8:66:
                    84:86:69:1c:d7:1b:0f:bc:f5:3b:91:d6:c4:68:d4:
                    14:0e:9e:05:73:4c:4e:b0:14:57:fd:98:ed:d1:2c:
                    8b:48:72:cd:22:00:69:44:bf:09:03:63:89:e6:e1:
                    a4:23:fc:6b:da:a0:8c:4d:e0:ea:85:cd:c0:c8:ff:
                    12:e5:ad:96:c3:20:f4:14:ec:25:39:6d:e1:02:f5:
                    75:96:0f:86:e0:96:2e:0f:90:b2:23:a3:61:d7:db:
                    2f:ed:e3:ff:e4:4c:cc:c1:06:2a:00:3c:7a:4f:ae:
                    3c:fa:05:a1:9e:e7:bc:ac:0a:3b:30:3e:de:a1:62:
                    a9:11:60:70:f7:46:40:4e:a0:0e:23:b7:b1:af:5d:
                    c2:dc:82:b5:89:97:85:a9:7d:90:86:f0:49:b6:2a:
                    0a:fc:2d:97:10:2a:c5:f2:b5:2c:10:e7:f7:13:01:
                    23:0c:26:b3:fd:ac:ae:ee:e5:3e:21:59:a1:1d:70:
                    a8:dd:02:4e:eb:34:03:08:47:b7:17:ed:3e:e0:88:
                    43:b2:6b:26:9b:e4:d4:1f:6f:3a:70:34:7d:b6:c4:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:57:E8:82:D8:C0:61:76:BD:7A:3B:40:91:5F:5B:C0:2D:48:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/5ad9b93f-bf15-3f1d-9d8d-e047c82bae8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl

            X509v3 Authority Key Identifier:
                keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:2a:4c:7d:0a:f2:6f:3b:18:dd:58:af:a8:51:f7:9d:19:
         bf:eb:71:dd:7d:8a:c7:22:0b:4d:41:39:41:4e:fb:a6:ca:39:
         26:ef:54:5c:6c:39:e4:10:0c:57:0b:0a:85:3c:de:e1:d1:76:
         12:ac:d4:0c:10:56:64:23:09:8a:28:ee:61:bb:b8:18:36:90:
         d8:ad:8e:40:12:4e:c8:d5:18:aa:30:27:f5:5b:99:f8:de:d2:
         7a:f7:d2:d4:e0:46:2a:4c:2c:d7:31:30:56:81:d3:9d:d6:ca:
         f0:95:45:e9:25:cb:3b:85:85:c0:17:bb:ff:9c:de:82:f3:dd:
         ff:ee:70:6c:c4:3a:53:20:61:5e:c7:ac:b1:1d:49:ef:e8:be:
         9f:8d:bc:6b:de:85:0e:7a:ee:b8:f8:8a:6d:81:fc:52:93:b4:
         21:87:4f:d0:20:62:52:52:de:f7:77:1d:8f:ed:ca:93:88:f0:
         9b:cb:0b:50:4e:57:a9:f5:04:6d:ee:66:7e:ad:aa:5c:83:05:
         57:89:b6:fd:9e:b1:31:8a:7e:b5:ee:7b:8b:cb:85:d1:ed:70:
         c4:9c:ef:96:78:1d:ff:70:e4:5a:2d:ba:28:d7:c1:ae:ef:17:
         ad:85:fe:80:3d:48:26:9d:3e:bc:f9:c7:f8:b5:2e:0d:53:1d:
         ce:df:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:34 2025 by rpki-client