Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa
File:                     1c60f76f-56dd-3482-8065-65a73b3af3ef.roa (raw, json)
Hash identifier:          YHubBVs5mnDHrawNqwsEx6C3gn/6amRmnKn1BKsLnVQ=
Subject key identifier:   10:EF:02:AE:D9:C5:2E:A3:8A:40:A8:97:E3:13:DF:16:03:8D:C8:DC
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F4328584B80B75B6178A6B54DBBEFB980
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     7018
IP address blocks:        2604:9d40:1f8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:5b:61:78:a6:b5:4d:bb:ef:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=b17c6e27-dcae-445d-b56c-de81512ab772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:e2:e3:c4:23:d1:42:85:f7:72:6d:f0:a3:
                    2a:e8:cd:53:3c:83:df:b8:52:40:c2:84:a2:18:e5:
                    fd:a6:12:af:52:bb:e8:92:9b:30:42:36:44:cd:03:
                    05:36:eb:3d:3a:69:fd:00:a5:6d:48:5f:f2:8d:8f:
                    17:35:59:d3:75:98:a9:05:ea:f0:6a:9b:6c:29:c1:
                    19:04:27:08:e2:d3:54:d6:2f:10:83:7a:74:9b:ec:
                    5c:6d:0b:4a:8d:50:be:50:65:72:c0:fc:a0:1c:b3:
                    dd:f9:a1:fd:07:fe:3e:64:c9:20:2d:cf:9b:4e:fe:
                    0c:b0:56:01:16:4b:ad:d0:23:8f:16:bb:63:74:8c:
                    cc:59:46:e6:cb:62:cd:2b:28:53:24:93:4b:f0:32:
                    a9:da:0b:14:8d:95:19:6a:46:4b:c6:58:e9:65:fb:
                    ee:3a:69:56:b9:5d:c9:d0:b4:25:cd:3a:46:ab:0e:
                    d7:d2:b3:f0:0f:27:8f:51:a0:fc:99:3a:ae:d8:6f:
                    48:75:cc:c9:4a:d0:d5:70:d3:a5:19:4f:38:ff:e7:
                    c5:f8:cf:97:00:40:4f:a4:26:61:f0:d9:cb:eb:92:
                    71:c0:04:23:76:57:bb:36:cb:95:60:ba:cf:f4:7c:
                    90:da:c3:84:b5:fa:07:67:98:06:04:71:27:fb:a1:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EF:02:AE:D9:C5:2E:A3:8A:40:A8:97:E3:13:DF:16:03:8D:C8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:1f8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:36:91:56:a7:00:21:da:92:d4:a4:ca:eb:02:b5:da:f1:
         e2:fe:e3:db:d8:99:2a:3a:61:b3:66:9c:ad:a9:3d:0d:6c:88:
         38:42:11:08:94:e6:0e:06:ef:35:6d:50:cc:48:b5:33:98:b3:
         78:29:a9:9b:a7:47:a8:9b:87:6f:83:b4:b6:fb:48:df:27:ce:
         72:65:20:9c:4c:ba:b3:aa:42:e5:de:51:4c:08:38:27:2c:36:
         08:e8:d1:80:0b:65:87:c2:0f:0c:67:d3:d1:6c:bd:3f:94:6e:
         83:5c:13:7f:7d:5e:6e:90:89:e3:3d:31:1c:e7:c4:2d:e4:76:
         52:95:5a:ec:9f:46:66:0f:56:b2:61:33:2c:7e:94:29:5a:1b:
         57:dc:21:66:65:72:e2:e1:d8:f9:4c:25:c2:f4:d2:62:d2:0e:
         ea:64:4b:c8:ce:80:99:41:57:f7:f4:5f:bb:3d:5e:09:4b:ae:
         20:98:85:87:ce:ee:97:ad:00:7a:91:16:d5:52:a0:15:36:ff:
         6a:c0:01:20:4f:1a:64:01:58:ac:b8:4f:1d:e0:af:7f:24:e1:
         14:3e:9d:83:aa:4f:c0:3c:c4:e1:9f:3d:bc:ef:b4:7f:7b:45:
         c6:5e:e6:ff:b6:16:04:5f:0a:b2:fa:27:bd:07:d7:31:f0:fc:
         15:a5:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:39 2025 by rpki-client