Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa
File:                     e444ac11-ef96-312e-bc6f-003e024b582e.roa (raw, json)
Hash identifier:          rbiRxloXwhQ08WOO8xC6DVIFrPa3PICiSfIGb0IpOSw=
Subject key identifier:   E1:EA:76:FD:20:66:77:72:36:83:7A:AD:62:8D:36:57:7B:44:7C:93
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584B7DECA363A47E2F52DE179450
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     26967
IP address blocks:        2620:125:b002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a3:63:a4:7e:2f:52:de:17:94:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=00d6d8a5-aaea-4ce5-a1f3-f942e19e0860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:90:ca:e3:6f:fb:7d:60:0e:af:55:89:b4:
                    f0:34:d7:2b:1d:da:75:fe:83:b7:2e:86:39:19:09:
                    53:ba:af:ce:44:88:9d:4c:a1:af:c9:74:c6:03:60:
                    c8:48:68:ec:d4:a4:1f:30:01:c3:f6:9b:17:ca:ec:
                    33:0e:32:6c:54:b2:c6:d4:e6:fc:ba:db:d8:9c:83:
                    b9:14:5d:5d:3f:e5:a9:fb:70:6c:02:06:3d:26:3f:
                    f7:67:67:cf:33:36:71:ec:8c:d9:87:b0:bf:91:59:
                    83:97:dc:9f:ca:18:e7:6b:01:c3:71:9d:91:6d:42:
                    3f:97:84:76:61:5f:9f:85:b4:5c:12:bb:9f:2c:84:
                    10:8d:8c:9b:7e:02:f4:73:85:75:33:4c:18:89:37:
                    8c:15:01:cc:2c:03:3a:80:d1:2b:77:2c:64:71:55:
                    f8:54:50:af:83:43:9d:38:3a:d0:36:02:08:44:36:
                    32:0f:41:bb:07:ab:6d:58:3c:33:8d:f9:4a:87:dd:
                    cb:97:b5:31:6c:54:a7:12:cf:b9:e3:2b:97:90:af:
                    2b:e0:fd:bb:70:1f:e6:74:6d:ac:9a:e5:bf:79:96:
                    7a:6e:a5:42:8c:b6:4b:6e:5c:8a:ab:f6:51:73:b2:
                    58:41:09:c1:22:c6:ce:02:5a:47:e0:3f:b2:fd:3a:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EA:76:FD:20:66:77:72:36:83:7A:AD:62:8D:36:57:7B:44:7C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/e444ac11-ef96-312e-bc6f-003e024b582e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:125:b002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:79:1b:30:72:89:10:e1:92:b2:2e:03:29:4c:fe:7a:3f:83:
         33:30:5f:97:89:42:33:cc:60:29:59:e8:f4:86:32:0f:54:7d:
         64:bc:09:96:22:9c:aa:0a:0c:c5:83:e6:d3:9a:ab:2b:0a:6b:
         8c:3f:8b:63:0d:c4:03:c9:e4:57:0a:6d:a4:20:77:cd:8f:65:
         c6:94:4e:64:20:8b:00:07:3b:d4:de:79:4f:fa:50:89:8f:2a:
         85:db:e2:41:5e:9c:f2:a9:b5:69:32:ce:01:ac:ca:a0:73:3c:
         f8:94:2e:5f:95:46:d2:fa:48:85:b6:17:9b:5c:17:5a:0f:4f:
         a7:15:e6:eb:ab:a7:2d:36:74:5e:9f:ba:a4:0f:40:44:e0:4d:
         2b:99:92:1d:a6:5d:48:00:b8:6f:18:7b:89:5d:a2:45:42:31:
         e8:ee:8b:30:57:f0:9e:11:ea:40:6b:fd:f8:5c:77:88:70:0e:
         d9:df:77:ff:d4:34:32:eb:b4:eb:71:8b:69:bc:60:95:17:61:
         31:ff:aa:dc:27:ba:b0:98:1d:10:96:06:f2:15:b9:b2:fd:94:
         99:89:0f:fe:ea:b6:04:cd:ef:bc:1b:7a:ad:ac:f8:4f:cd:f6:
         0b:68:6d:e1:f5:32:a6:bc:0b:18:b1:d0:81:7b:46:e8:99:36:
         ef:96:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:37 2025 by rpki-client