Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/c2ed4edf-abd4-3645-89a4-afe85d801503.roa
File:                     c2ed4edf-abd4-3645-89a4-afe85d801503.roa (raw, json)
Hash identifier:          oo96MWoz+jIKQuPWLwUTsXgD//+sILV3LynAwqe1ado=
Subject key identifier:   1C:D0:B0:D7:4E:3C:1A:69:EB:AA:D2:AF:5A:D1:49:4A:4C:C4:9F:5C
Certificate issuer:       /CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
Certificate serial:       010D0C9F4328584B80B78153E6AFF719FECE1980
Authority key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/c2ed4edf-abd4-3645-89a4-afe85d801503.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     1742
IP address blocks:        2607:fb60:2404::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:81:53:e6:af:f7:19:fe:ce:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=dc7b5fa6-fe6a-4d6f-bba2-6eaa0dc41d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:54:c8:76:fc:eb:c2:51:b4:7b:f7:a3:29:
                    09:74:3a:37:58:61:36:8a:87:3d:87:e9:1b:7b:55:
                    d8:36:8c:e4:0d:91:39:44:4e:f6:cf:ba:dd:29:16:
                    b7:e8:be:72:62:f7:c2:a0:a2:f1:fa:85:d5:05:52:
                    69:87:8a:89:bd:bd:e5:64:2c:c0:e8:a2:f1:56:f8:
                    c0:4f:b3:1c:af:c8:6a:01:23:31:2f:66:f5:2a:84:
                    31:c7:08:96:85:9e:41:21:64:54:2f:44:e7:4e:e4:
                    6c:b9:1f:d0:3e:7b:20:d5:9f:f3:7c:91:96:23:e6:
                    d4:3d:5c:db:ff:51:08:6e:5d:a1:01:a9:16:41:48:
                    1a:d0:ef:8b:95:fa:ae:31:54:55:82:46:96:aa:0b:
                    21:49:07:d7:66:4a:cb:d0:9b:2e:05:35:db:84:34:
                    a0:c9:31:d8:b0:63:87:f1:fb:b7:47:ec:dc:bc:a2:
                    d4:9a:49:03:44:4e:b3:ea:7c:66:d8:68:8e:ed:64:
                    8d:d2:a7:45:cc:64:ff:06:e1:99:c7:a2:5f:41:ca:
                    5c:d1:a6:56:6b:86:de:08:22:76:31:9a:5d:20:41:
                    31:df:3b:4f:8e:b0:ee:67:3f:db:55:dd:d3:c0:9f:
                    45:4d:e7:b8:7e:9c:aa:d5:1a:d9:f9:a4:2d:5e:f4:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D0:B0:D7:4E:3C:1A:69:EB:AA:D2:AF:5A:D1:49:4A:4C:C4:9F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/c2ed4edf-abd4-3645-89a4-afe85d801503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl

            X509v3 Authority Key Identifier:
                keyid:54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb60:2404::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:67:bb:76:48:54:12:7e:13:e7:be:56:15:e2:5c:7f:54:
         df:9e:b8:fe:57:cd:2b:63:09:e9:3e:64:c7:db:bf:93:5d:f2:
         02:a3:9c:68:b5:75:84:f3:4e:be:37:93:f5:ca:d8:7c:37:2c:
         26:f2:ff:8a:c5:9f:18:fa:e4:36:00:3d:3a:18:84:f8:82:42:
         ae:65:c4:3b:78:7a:41:19:6a:46:b5:6e:d9:5e:32:58:f5:56:
         0a:dd:e6:c8:ee:c9:ee:ce:66:7a:ce:50:6a:2b:cf:f9:4e:17:
         21:86:af:16:41:d6:2a:c5:e6:84:2e:eb:e2:0f:71:c3:93:08:
         a1:c3:88:21:22:05:a0:7e:19:96:4a:20:74:5d:2f:09:77:f2:
         2c:ce:d7:b1:2d:5f:98:21:05:fa:fa:29:fa:00:ff:e9:22:69:
         0c:47:c9:c9:5d:eb:35:0e:bb:29:bf:e6:26:32:18:8e:1f:da:
         4f:f5:79:1a:75:d8:96:d2:ba:d5:1d:f8:ce:d2:bf:fc:35:0f:
         25:e7:04:d7:26:95:1d:91:a3:49:d2:df:2d:b1:d8:71:c0:be:
         ae:a8:6c:be:be:c1:ee:2d:e3:6f:bc:2c:d5:b5:96:0d:b5:ea:
         d6:1e:0b:2d:27:4c:ef:87:68:a4:7d:ab:54:6b:06:01:1f:c4:
         c9:57:b8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:44 2025 by rpki-client