Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e84eb27b-1638-3755-b8a1-4b0e15a152f9.roa
File:                     e84eb27b-1638-3755-b8a1-4b0e15a152f9.roa (raw, json)
Hash identifier:          i0p3lK2zcFVb4/iK3iWXbrRFAkmKXBKF3G8BDpDbR+I=
Subject key identifier:   74:B7:62:97:14:B7:4F:D6:F3:BB:19:87:5E:49:C4:91:00:75:43:7A
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584B91777CC62B1868D4892F0080
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e84eb27b-1638-3755-b8a1-4b0e15a152f9.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     396998
IP address blocks:        2600:3500:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7c:c6:2b:18:68:d4:89:2f:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=e109dea1-c8a9-4101-b94d-3a67e210a07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a0:12:23:28:81:24:d6:bd:24:07:29:89:60:
                    27:a9:9b:5c:68:9f:d7:72:12:6b:00:0d:7b:58:62:
                    21:88:64:0a:f1:6d:13:85:21:04:d3:6c:ab:75:72:
                    50:97:64:1b:f6:2c:b8:2f:e5:88:ae:27:1e:5f:c8:
                    1b:3e:54:d3:29:4e:2e:a3:e6:b0:42:2e:99:70:7b:
                    46:15:08:67:73:ac:02:57:fd:75:ce:23:46:cd:4c:
                    27:a6:05:13:c4:ed:4e:3e:b5:19:d4:c7:3a:42:8d:
                    c4:67:f9:7b:a3:4c:e9:24:e6:aa:82:03:88:3f:ed:
                    c8:9e:cc:57:20:14:99:46:34:7f:51:c6:46:ae:83:
                    f8:f1:6c:ec:78:a1:52:1f:77:28:3b:61:02:f2:84:
                    17:01:f7:55:bd:80:87:1e:d7:9f:bd:b6:08:33:0a:
                    8b:95:15:31:be:9b:c5:44:87:9b:49:ff:25:60:29:
                    8b:13:9e:0f:62:90:fc:ea:e4:e3:19:ba:5d:c7:d8:
                    5c:b0:48:56:c0:6f:57:9f:7b:c4:d3:1d:46:c0:95:
                    03:dd:61:61:2f:a1:ae:16:40:51:1e:b3:ba:64:7f:
                    cc:ce:3e:52:c6:7c:d6:44:0d:75:ed:35:ab:70:a2:
                    7a:ad:39:f2:90:b8:00:32:bb:cd:fe:10:77:a2:b4:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:62:97:14:B7:4F:D6:F3:BB:19:87:5E:49:C4:91:00:75:43:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e84eb27b-1638-3755-b8a1-4b0e15a152f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3500:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:fe:04:e9:31:ff:87:6f:5e:12:f7:59:67:e5:4a:6b:c7:
         65:6e:0d:55:58:aa:1e:f3:9b:ef:d0:fc:11:11:e7:1b:4f:6d:
         59:2f:eb:ea:ba:88:ba:6f:1e:d8:1a:04:87:de:e0:ed:eb:a3:
         95:6d:08:f2:96:c5:6d:22:81:92:28:55:f0:ae:79:aa:f9:98:
         00:8f:80:9c:ce:fe:ce:89:e4:83:78:94:c0:a2:fb:b4:ba:a1:
         d4:3c:3b:33:5d:05:4c:fa:4c:5e:e8:78:27:6f:52:3e:a4:ab:
         16:76:aa:e7:16:17:d7:f4:a2:df:14:83:ad:52:a2:53:74:6b:
         22:85:6e:87:5c:48:63:1c:2c:03:c8:0f:35:5a:98:5a:9a:5c:
         4d:f7:f5:70:8d:9f:6c:6a:58:ab:f2:f9:29:3a:35:ab:b3:20:
         44:39:6f:07:78:e9:fd:66:bd:cf:12:3d:40:ee:8b:7d:ea:8e:
         56:a6:12:ab:f7:18:e2:6d:98:1e:e5:04:80:b5:b9:62:ad:41:
         14:9e:45:5e:17:dd:35:97:34:e5:5a:28:75:d1:d3:e1:4b:27:
         9a:e5:3c:fa:db:02:2c:2e:db:ba:37:42:56:1d:a5:7d:4f:d6:
         8c:54:69:ee:1f:6a:99:cf:de:a5:8e:20:53:95:f8:fc:97:cf:
         e6:3a:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:24 2025 by rpki-client