Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
File:                     28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa (raw, json)
Hash identifier:          oqnQ4InH9RsorR7Q+nkv+TAp50L/VNMveiPaE4AY3qY=
Subject key identifier:   A5:9C:76:79:4D:9C:DD:5B:2C:1D:D0:45:E3:BC:FC:AF:D4:A9:3F:CB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B64CE36CB1698AAAC6CD76BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     45566
IP address blocks:        2620:15c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:36:cb:16:98:aa:ac:6c:d7:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=714e917e-86dd-47e4-a988-92158c83c313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:58:f1:20:db:72:e1:fd:78:5a:7b:64:13:
                    39:ee:05:86:fd:5a:ce:b8:99:53:6c:62:64:b4:44:
                    2e:5f:c4:b7:2d:4a:2b:03:a5:36:77:9e:ef:50:78:
                    19:77:c7:39:ee:4d:1a:cf:37:14:e3:b7:21:87:e9:
                    95:01:c4:4a:23:19:ff:15:81:08:3d:e5:38:85:1e:
                    a1:9f:95:bd:e7:4d:00:3b:41:62:f6:36:09:bc:1c:
                    e5:f3:59:b3:2e:66:3f:a1:c3:03:b1:b5:09:93:37:
                    15:e6:21:90:08:5e:54:6c:b3:fa:00:94:88:37:1c:
                    ce:fa:fd:09:64:9c:2e:03:a0:b9:55:dd:31:c1:a8:
                    b2:95:f8:fc:f9:ca:a7:ee:07:dc:d1:b6:de:d9:5c:
                    a1:aa:55:f0:94:f6:29:a5:17:fd:96:eb:86:27:ce:
                    c7:5e:a4:dd:85:6b:2c:69:c5:78:a9:cf:9a:c6:48:
                    e1:43:e1:23:db:5b:5a:82:44:37:9c:d4:c0:00:cb:
                    ee:6a:5d:a6:96:3b:70:98:01:6e:6f:31:8c:ca:4d:
                    b8:ba:a3:a6:c7:d5:1d:e8:85:de:25:cc:28:e3:54:
                    99:d7:99:25:2b:0e:c2:90:30:31:55:27:b6:d7:7c:
                    7a:10:d5:64:3b:75:55:0e:c3:d7:ac:5d:b7:dd:e1:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9C:76:79:4D:9C:DD:5B:2C:1D:D0:45:E3:BC:FC:AF:D4:A9:3F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28523adb-bf3f-3b48-b0f4-cc9433a85b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:15c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bf:12:14:6a:fc:99:b7:a8:31:17:e0:d1:52:70:79:e5:68:
         00:68:fc:50:1d:10:f1:a1:61:55:e0:bd:ae:d3:76:85:37:1d:
         89:72:ec:3b:0c:d5:8d:51:e5:25:d6:f7:f1:16:97:a7:32:c9:
         07:bf:2c:3b:e7:fc:c0:83:4b:2d:e7:51:6a:63:fb:d7:ef:93:
         92:b1:0e:e7:32:d0:a3:33:32:8b:fd:99:98:9f:86:49:ba:f8:
         aa:f0:3d:fb:1e:c2:cf:0a:0b:b3:7a:6d:9c:b0:c3:39:fd:1d:
         4d:2a:7b:fd:5a:94:88:9d:e0:b2:6d:ee:6b:bd:da:c9:42:8a:
         c2:52:cf:b2:3e:a1:ea:83:28:ee:03:24:a8:23:6c:18:4f:ae:
         69:ca:f7:67:de:6b:96:8e:e5:7d:a7:9d:06:9c:cd:5c:61:94:
         20:44:17:7e:48:b9:e2:41:a3:df:cb:a0:47:83:1f:f7:42:2d:
         45:d0:16:9e:7b:16:2c:fb:83:0a:9f:f2:10:4f:02:6e:9c:d9:
         a7:b6:a9:7b:05:4f:4e:93:f0:9b:4b:4e:71:97:f0:40:f3:19:
         1c:eb:85:1b:b8:ac:f8:27:73:04:b7:93:fc:5b:f2:2e:05:2e:
         00:9d:df:e2:cf:45:a3:ff:a3:e2:c7:09:f3:82:f3:87:bd:f8:
         86:bd:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:16 2025 by rpki-client