Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/0448385c-7d17-3eb1-a6b5-69cbe928a23a.roa
File:                     0448385c-7d17-3eb1-a6b5-69cbe928a23a.roa (raw, json)
Hash identifier:          5lHthazpqTUtTLvSVdqptgXA8YLIZj9CGqMqd66myLw=
Subject key identifier:   82:3F:F7:5D:40:54:28:95:DE:4F:3D:B5:B7:4F:F4:28:BA:CE:C7:34
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584B8BE22989990E3E1868FB6180
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/0448385c-7d17-3eb1-a6b5-69cbe928a23a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     63023
IP address blocks:        2607:a140:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:29:89:99:0e:3e:18:68:fb:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=d3aa37e7-b1ad-4f50-ac48-74f2c955753a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:b0:45:8e:40:eb:86:88:34:3d:42:9f:b9:
                    ed:a2:e5:ba:1f:52:02:78:0a:0d:95:af:c1:c6:2f:
                    89:ee:23:c8:51:51:c0:47:04:e1:28:19:a8:ce:a8:
                    15:15:b0:a9:d2:fb:18:27:06:b9:bd:ec:b1:04:8a:
                    0a:01:be:52:f5:74:84:d6:fe:26:fe:99:ec:c2:bf:
                    24:1d:88:11:33:5d:e2:b4:e9:0a:5e:a7:d4:19:7f:
                    07:d5:ee:1b:21:e2:89:03:f7:26:33:6c:2c:87:bc:
                    66:6f:4a:a8:96:3b:f8:e2:96:7c:71:83:a2:be:c9:
                    3d:04:18:1d:ae:de:96:20:82:17:16:22:27:c7:91:
                    65:71:0a:7c:5a:3e:ab:eb:93:a5:b0:73:09:ff:06:
                    64:4c:4d:07:6a:e1:5d:60:ea:27:2e:fa:95:75:f4:
                    1e:63:e7:46:99:87:4c:3f:db:38:b1:8b:ec:9d:6b:
                    78:13:62:a5:2a:a5:66:1f:bb:d3:7e:73:17:01:5c:
                    92:64:a8:89:1c:0a:86:00:94:bc:f3:6f:f3:36:70:
                    ef:e6:28:ae:64:21:4e:d9:8d:f8:01:15:41:8a:2e:
                    a4:c3:e6:42:d3:b5:d7:26:d2:2d:e0:a2:59:36:12:
                    31:55:f8:93:0d:94:ce:68:e1:74:0f:7c:b8:71:a2:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3F:F7:5D:40:54:28:95:DE:4F:3D:B5:B7:4F:F4:28:BA:CE:C7:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/0448385c-7d17-3eb1-a6b5-69cbe928a23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:7d:5e:ee:b4:22:c3:7a:99:b6:f6:80:7d:dc:30:42:c0:
         6f:c0:1f:c7:21:5e:d8:fd:e8:28:fc:19:00:f3:19:a0:b8:10:
         1d:fa:22:74:21:76:f6:ba:ca:cf:86:06:2a:4e:43:e1:62:51:
         ae:f0:5a:e3:43:a2:5a:a4:a2:28:59:c1:82:40:fe:51:df:48:
         e8:26:c8:a1:e1:64:af:22:2d:8e:cd:32:8e:68:2f:bc:11:0f:
         ab:f2:c2:e7:80:dc:46:ff:d2:08:95:2a:c6:0f:5e:4d:26:da:
         f5:82:1d:78:af:27:aa:a0:33:b1:af:e4:3e:a9:a8:02:1d:32:
         f6:65:96:c2:ee:f3:dd:48:7c:ea:47:2c:20:85:a4:30:de:5f:
         5e:c2:29:9e:52:20:ae:af:d8:a8:64:4a:ff:c9:d3:0d:e8:6d:
         73:4f:00:67:99:e6:59:74:95:6a:25:87:15:34:6f:09:39:58:
         75:92:1b:2c:72:e2:a6:9d:3a:b8:fc:18:82:4d:2b:23:b2:8d:
         d1:0b:ce:87:68:1a:59:63:86:43:31:27:d5:fa:2e:6b:d0:7b:
         6c:be:86:a6:14:30:43:d7:bb:13:55:9c:91:57:c2:cf:3b:65:
         db:c8:59:1c:53:d2:7e:fe:eb:7c:5d:d1:b1:b1:23:9b:d2:90:
         a6:e4:81:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:57 2025 by rpki-client