Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa
File:                     419dc84b-1701-3b3f-9064-f7013b5c6c12.roa (raw, json)
Hash identifier:          pTmEhRRojYG/A68APKuHGju551F3OeFNmzYrhtfCPDQ=
Subject key identifier:   44:B5:9F:F9:34:2A:7F:11:4A:6D:41:77:3D:05:E1:2E:23:E0:C0:47
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F4328584B1AD1927AEFB383EDDBC85860
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     55211
IP address blocks:        2607:b3c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:92:7a:ef:b3:83:ed:db:c8:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=a2dbf2f0-22e2-40be-98df-1772ba0fe5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:70:03:6c:25:a9:a6:a0:55:bc:de:32:16:
                    87:af:90:18:1a:75:89:d7:fe:fb:07:5c:38:a1:9c:
                    14:8a:64:b7:f2:d2:6c:47:63:d9:7d:f7:0d:86:3a:
                    37:08:df:b9:e4:d4:cc:75:1f:5e:ed:a6:78:32:11:
                    51:78:1f:11:d6:0c:28:c5:6c:60:c3:8e:7d:cd:8f:
                    61:1f:03:67:72:46:94:0d:c7:7f:0a:b2:8d:0a:22:
                    9e:1c:37:77:17:06:ac:d7:13:7c:1f:f3:d2:42:03:
                    74:b6:27:08:5b:04:8c:e1:9d:34:7b:3d:7d:27:27:
                    ed:30:86:fc:57:0b:2e:29:36:f4:a0:67:d6:76:2f:
                    82:e8:b2:81:b2:75:40:e0:0f:bf:c6:7c:44:dc:03:
                    0f:07:0e:67:d3:ce:10:69:eb:5e:25:91:1a:cd:47:
                    c7:bb:4b:f0:5a:ea:f1:93:7d:03:e1:08:6d:33:ac:
                    bd:12:3d:3a:30:ac:54:3d:c3:06:bd:23:55:0d:cb:
                    13:74:f7:4f:70:7f:f9:6a:ad:7a:b8:d9:17:eb:da:
                    29:27:86:1b:4a:14:dd:00:7a:65:b7:80:7a:3d:08:
                    70:6f:fb:40:b9:c2:bb:52:c9:b0:50:d1:c2:92:58:
                    e8:9a:af:d2:2d:ce:11:22:d8:a8:55:f9:b3:f4:a6:
                    b2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:9F:F9:34:2A:7F:11:4A:6D:41:77:3D:05:E1:2E:23:E0:C0:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/419dc84b-1701-3b3f-9064-f7013b5c6c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:09:6f:97:ff:7e:ae:2f:e6:e9:96:bb:24:d7:c8:b4:1e:
         95:11:84:03:8c:3d:2d:83:86:74:e4:b6:60:53:f5:26:75:f9:
         13:fc:4a:f4:00:f2:0f:29:5c:5f:54:c0:26:b8:81:10:ce:69:
         6b:d2:9d:67:93:11:9b:c9:e5:e6:f3:8f:86:8a:90:3f:06:8b:
         1a:51:84:d4:c5:c0:e6:ef:f2:3b:3b:b2:77:8b:e4:45:a2:4f:
         74:0b:30:6b:b7:69:1f:75:5c:9a:93:28:50:d3:cc:10:cf:ca:
         a8:30:71:16:42:fb:b5:4c:43:45:ab:73:c5:80:55:64:15:09:
         0a:3c:2e:79:30:c9:7f:48:97:75:db:a5:82:0d:65:09:59:24:
         8a:ad:9d:0f:7c:a1:93:a6:4c:fc:0b:75:b3:82:7b:da:1e:9c:
         69:19:07:9b:ef:ba:fc:28:97:fd:fa:f9:29:b0:97:f8:68:59:
         f0:37:b7:76:d8:3b:6c:0f:82:d6:c6:15:5d:95:38:23:28:af:
         29:f5:eb:c0:de:87:25:7c:b3:92:71:cb:3f:4b:e8:1e:9e:e6:
         84:55:a3:c1:49:ee:8c:e0:fd:75:0d:1b:91:e2:12:cb:f6:5e:
         d4:5a:04:c7:e0:83:8e:01:0d:2a:f0:f6:04:fb:3d:f6:dd:5c:
         c7:49:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:55 2025 by rpki-client