Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/42a0b8f8-04df-328b-862c-6be59741514b.roa
File:                     42a0b8f8-04df-328b-862c-6be59741514b.roa (raw, json)
Hash identifier:          +YefyCsrvMHXqzzQ9YCZeaWUXzbrDCmmJ/tyjncX5d0=
Subject key identifier:   D4:41:C8:C2:3E:1F:AD:BE:C5:C6:66:9C:39:69:E9:5B:6D:A5:69:7B
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B4A5CA09B4AA3E99F0F6D4B00
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/42a0b8f8-04df-328b-862c-6be59741514b.roa
Signing time:             Tue 23 Sep 2025 13:44:09 +0000
ROA not before:           Tue 23 Sep 2025 13:44:09 +0000
ROA not after:            Mon 22 Dec 2025 14:44:09 +0000
asID:                     6327
IP address blocks:        2607:f798:250f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:5c:a0:9b:4a:a3:e9:9f:0f:6d:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 23 13:44:09 2025 GMT
            Not After : Dec 22 14:44:09 2025 GMT
        Subject: CN=61794266-6644-4e7d-90b7-1e2fd36cd3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:e5:c4:4e:92:5a:fc:2f:0b:6d:34:01:20:
                    dd:e2:2d:1c:1b:d6:a3:2b:2f:e9:70:b2:8a:fd:6a:
                    fb:91:58:dd:11:77:de:7e:df:30:d0:79:4e:2d:16:
                    48:e9:99:03:12:10:c4:12:7f:85:0d:67:41:79:f8:
                    58:07:56:a0:64:75:c6:4e:eb:a3:4f:a4:e7:75:5c:
                    2a:a2:34:bd:ec:39:27:2e:04:62:97:2d:68:a8:49:
                    80:b8:35:e8:71:f7:98:d7:c5:54:4b:81:ff:51:a8:
                    ea:f2:39:e9:ea:00:c9:0c:83:da:e2:80:94:be:40:
                    31:34:5d:72:6a:4d:9e:7f:f2:ee:95:22:57:1e:70:
                    97:94:4e:b1:40:33:f6:c6:0d:42:1d:96:d9:99:ce:
                    2a:88:c3:bd:cf:9e:45:0c:68:bb:f7:b8:a6:bc:2d:
                    23:9d:16:2d:91:e9:08:90:cb:6c:3f:2b:9c:80:46:
                    6d:98:a1:eb:e4:00:38:9a:e6:72:38:9f:20:57:2e:
                    71:7f:28:ce:41:a2:32:e8:01:36:5c:6e:8f:7d:a5:
                    00:4f:e0:d2:f1:0b:55:e4:d7:b8:63:68:97:d8:2d:
                    a7:28:25:b6:5d:2d:ab:26:13:c1:83:e3:fb:ab:0c:
                    cf:03:31:fc:54:51:2a:47:6a:e9:71:73:72:2a:d2:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:C8:C2:3E:1F:AD:BE:C5:C6:66:9C:39:69:E9:5B:6D:A5:69:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/42a0b8f8-04df-328b-862c-6be59741514b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:250f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:b6:43:35:07:4e:7a:04:77:a1:84:54:7f:8a:d2:7e:34:
         da:a3:a8:3c:3e:70:dd:a1:d3:3e:1b:37:0f:f4:58:56:09:0e:
         bf:6c:01:9a:fc:25:10:06:36:e8:b2:5d:cb:a1:c2:c5:c9:db:
         ba:55:ce:4a:e2:41:31:0a:18:d7:66:d5:65:8f:68:27:83:95:
         36:5c:bc:77:90:a9:2f:30:bf:3b:f9:8a:22:9c:40:28:57:fd:
         31:b4:25:d7:62:ed:ca:27:99:42:8b:b2:92:fc:27:ac:d3:82:
         88:be:88:77:9f:45:54:37:3b:bc:f4:33:65:4c:c8:15:0e:ae:
         8f:1b:ce:96:fc:c0:4f:fa:ae:63:9f:06:0f:9c:f5:ac:24:0c:
         ca:64:ab:9e:3c:1d:59:2b:e7:5f:f8:6f:e0:54:67:b3:80:22:
         4c:26:43:97:1a:33:9d:f3:7f:93:e0:5a:e1:c9:ee:86:9d:34:
         3f:46:dd:54:56:fa:61:91:04:40:5b:e8:a1:75:44:45:55:e0:
         d0:6b:12:9e:ba:87:ce:76:30:76:ad:6c:82:03:7b:81:72:cd:
         19:ef:a0:17:b0:10:fc:77:26:4f:0d:bb:ea:d3:3a:19:b1:81:
         38:75:e2:b6:5d:9b:ff:7e:2e:3b:76:d2:70:42:17:88:83:61:
         d5:21:53:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:57 2025 by rpki-client