Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
File:                     2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa (raw, json)
Hash identifier:          AkNP6Ev7Pk4mCxTb//1G5rSLYNDrvMkwL+GPPr9pRyM=
Subject key identifier:   8E:00:34:1C:60:BE:1A:6C:D4:88:DD:7D:87:BC:D8:F2:1E:58:E2:D3
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584B6D2C989F5689CDA75B8C2D80
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     397702
IP address blocks:        2607:46c0:dead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:98:9f:56:89:cd:a7:5b:8c:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=506ca505-9dac-43b1-92e4-a8090666f6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:fe:3e:60:9a:bd:92:bd:d1:33:f7:92:75:
                    cb:37:88:45:23:ba:35:8c:83:28:50:3c:3d:08:09:
                    5e:77:e5:fd:e8:7f:62:dc:7b:6e:66:49:13:fd:6a:
                    22:2f:cb:c7:31:5e:62:1d:3f:ec:33:34:06:36:e0:
                    d7:85:8e:e9:25:42:17:06:59:18:ed:9c:64:c8:d5:
                    59:9e:38:e1:ed:cb:68:2f:ba:51:26:aa:4f:8e:26:
                    a6:d8:a7:64:7e:bb:0d:85:65:9e:de:ca:3f:6b:30:
                    fc:75:88:a7:eb:1c:38:e0:80:3a:69:1f:08:30:3f:
                    7f:50:bb:89:f7:4d:b1:95:c2:e7:c1:d0:90:d9:c7:
                    55:b7:56:c5:b3:ea:c1:d6:c4:bd:6b:b1:61:fb:c6:
                    9d:a5:17:41:58:68:91:d7:29:60:85:d2:2d:e0:cc:
                    b1:59:c0:d1:42:00:fd:6c:1f:34:e5:ee:ae:b0:ae:
                    15:c0:b5:bd:19:ff:d6:de:cb:b0:02:fd:c6:f3:46:
                    42:45:b7:5f:4f:9f:3b:25:ed:34:89:80:98:d8:17:
                    55:f8:c6:17:30:52:f1:93:f0:6d:51:11:4b:77:b1:
                    05:10:5c:2c:c8:ac:b9:fe:ff:67:6b:ae:51:e1:cb:
                    87:1d:fb:10:1d:af:d2:b2:59:67:39:23:68:81:89:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:34:1C:60:BE:1A:6C:D4:88:DD:7D:87:BC:D8:F2:1E:58:E2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/2f1104db-d2a0-3d23-acdd-d1a6a1088b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:dead::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:60:47:ba:a0:dc:8c:95:ed:da:7d:9e:b4:ff:1e:fd:bf:34:
         08:56:e5:14:62:e9:b2:7e:88:ec:07:db:97:6b:29:87:35:1a:
         75:b0:7b:7e:f5:0f:7e:ba:2d:1d:9e:c2:02:1b:3e:a6:9e:11:
         5a:39:3d:5c:20:37:bc:5c:19:b4:a7:48:af:1e:18:ff:0e:36:
         f4:6c:76:3b:02:06:4f:f2:39:3a:53:cf:57:ed:7c:7e:8b:95:
         ed:b6:6e:20:aa:66:f3:14:e0:6e:e3:36:a9:34:be:f3:a1:b9:
         a5:ab:f3:84:6a:3c:79:e2:3c:c4:68:05:2d:60:84:f8:38:81:
         2e:9f:c2:ff:b3:e1:19:10:b8:ce:bb:26:2f:ca:f0:97:4a:62:
         4b:c5:5e:06:b9:7b:8b:04:56:67:58:40:63:1e:0a:d8:ae:45:
         f7:c0:29:63:e9:e7:71:ad:71:c7:40:a6:96:6c:83:62:22:b5:
         ea:01:30:75:cb:6f:37:c9:fd:74:ec:f9:1e:db:d2:f6:89:f0:
         1d:2b:78:58:0a:79:02:27:9e:fc:ce:54:6c:b2:69:06:a6:44:
         99:1c:16:d0:9f:2a:dd:f0:ab:ff:30:27:c6:24:26:b6:4b:47:
         cc:19:ab:4a:cb:8a:28:51:42:75:52:d9:6d:1c:65:08:56:4b:
         40:a8:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:28:12 2025 by rpki-client