Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa
File:                     c383a3db-ebff-3281-a9f6-56f395f69948.roa (raw, json)
Hash identifier:          qo1rRa1cNsEY5FA5VoI75kEwdr9m396l0RUy+I7e8ak=
Subject key identifier:   15:2B:80:5E:80:30:16:5E:E9:A9:13:73:5E:D0:87:12:1D:EC:45:6B
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F4328584B8917736D247AD3FE23027560
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     46969
IP address blocks:        2602:80c:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:73:6d:24:7a:d3:fe:23:02:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=45bde43a-bf97-475b-9ff1-d3b369c07de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:30:a1:1f:97:20:a4:84:aa:34:7f:e0:44:
                    06:77:36:a6:9b:7c:20:9d:18:5f:33:13:5b:f2:2a:
                    f9:3e:1c:09:c2:23:ec:a0:da:ae:cc:e9:4b:84:17:
                    10:63:86:d8:e3:4f:e9:3f:80:c6:30:8a:4c:e3:6f:
                    ee:e1:ca:df:4b:42:40:42:58:b8:fe:01:dc:af:ef:
                    64:93:9d:2e:0a:5f:67:a9:a0:a1:d6:be:19:2c:cc:
                    1e:cb:7b:ec:88:44:19:79:4f:b0:3d:31:1d:b6:95:
                    af:ce:54:db:84:00:ae:4f:da:29:57:e6:8e:a1:8e:
                    e4:8a:ca:85:70:6e:a1:93:3d:d9:4c:64:e2:ad:23:
                    b0:3b:03:f3:01:1f:ed:ec:06:e9:5b:f0:36:db:5b:
                    b7:9c:26:b7:91:37:a7:bb:22:3e:e1:3e:d1:db:97:
                    17:91:6a:9f:c9:59:b1:cd:ad:90:f9:8f:05:ca:ea:
                    b2:69:05:c0:d1:7b:05:c3:92:ee:6f:af:75:fb:af:
                    48:69:5a:0f:2a:be:b0:39:3a:5b:eb:d1:69:6b:0a:
                    c8:5b:30:ab:d7:52:2e:e1:9f:fe:b1:1f:8e:9a:10:
                    60:e7:bf:55:49:e6:ee:a1:09:9d:00:ea:8e:38:88:
                    7b:17:57:02:66:1e:d0:86:72:06:c6:47:38:0e:f0:
                    d3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:80:5E:80:30:16:5E:E9:A9:13:73:5E:D0:87:12:1D:EC:45:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/c383a3db-ebff-3281-a9f6-56f395f69948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:5f:f6:43:93:ca:4a:54:15:76:61:c0:07:5b:26:79:e1:
         3d:43:43:78:66:02:6d:d8:9a:15:ab:ab:0c:bb:eb:f0:d2:8b:
         4d:eb:16:a2:e1:6b:2a:96:64:86:28:b7:2f:f0:00:16:c6:86:
         89:3f:7c:42:e1:b2:cc:fd:c8:93:e1:73:7e:ac:73:7d:bf:8a:
         fd:bc:71:03:1d:7e:e0:f4:fb:3f:55:8f:a1:dd:6b:f2:dc:24:
         88:d5:4b:b3:3c:e8:83:d4:cb:c4:29:24:13:9f:ff:33:be:1a:
         8f:cd:97:9c:94:18:31:1d:b4:64:97:ca:7d:80:bb:90:ed:f2:
         0c:68:60:40:b6:66:cf:58:91:e6:f6:11:88:ae:5d:68:20:87:
         13:66:eb:6c:11:af:16:6a:e4:5a:b5:1d:63:26:3c:31:79:7b:
         ac:93:48:1e:ef:d0:70:91:93:48:6c:1c:c9:82:fd:d6:97:41:
         25:e3:82:f2:cd:bb:aa:79:c8:f4:54:dd:54:0f:a6:e3:54:df:
         be:0d:c2:b0:a4:4e:ca:a0:eb:95:75:f2:ff:bc:4a:15:3f:72:
         34:c6:b1:82:a6:f8:7f:9b:07:ed:f6:69:15:c1:d8:f9:c1:19:
         e9:05:46:9e:c5:ca:98:26:73:8c:b3:d7:80:c3:2c:16:a8:51:
         49:57:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:57 2025 by rpki-client