Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa
File:                     60fbf9ed-a259-334b-a1c8-e266b1343140.roa (raw, json)
Hash identifier:          flO/cIFCc1TKYsMlcd7Qc9o0jOaq+JtADzXZNbTWSxs=
Subject key identifier:   A1:3A:5E:9C:A9:64:F0:F3:B6:4F:60:9A:A9:41:56:BD:39:85:58:4F
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B4BAC5D442D56CB2AAD108BC0
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     812
IP address blocks:        2607:f798:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5d:44:2d:56:cb:2a:ad:10:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=313228f2-d5ee-4528-aaa6-26bed8bc35a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:8d:84:0c:c7:f1:e1:e9:af:14:7c:87:1a:
                    e0:95:f1:e1:7f:c0:a7:f9:86:7f:fb:05:cb:0e:7b:
                    df:49:8c:91:79:9f:25:a8:4c:1a:85:1d:c0:c6:2b:
                    c8:6b:a2:16:9b:3a:34:85:a6:31:3d:7c:b0:80:9c:
                    59:17:27:d8:0b:26:67:6b:d2:0e:05:96:a3:32:17:
                    07:8f:6e:a8:66:60:ff:89:73:11:a2:2f:a5:65:3e:
                    ca:7c:94:ac:f1:90:67:56:61:9e:42:a7:88:0a:27:
                    34:68:02:58:69:25:c4:3b:58:f4:f3:91:0d:26:6c:
                    0b:ad:6e:18:af:06:32:82:19:39:d4:c9:21:db:08:
                    14:0c:5c:c9:e9:dc:91:f1:b7:30:30:40:f3:d4:4f:
                    c5:d8:29:8f:90:b6:bd:fa:f2:4d:7f:83:83:dc:22:
                    05:4e:48:75:02:94:ba:c2:f3:b3:56:48:b6:2a:10:
                    71:f6:d4:26:a6:ca:aa:23:82:40:5a:36:56:a9:6e:
                    02:7a:21:9b:7f:75:43:04:82:27:7c:0e:de:8f:4e:
                    c2:52:94:13:a5:53:a3:39:1c:82:9a:e4:7d:96:cd:
                    d9:3e:c9:a6:0c:42:23:5c:2a:4c:c5:bc:4b:67:c5:
                    ab:4e:8b:aa:d2:a7:4e:f0:dc:bd:aa:43:88:be:54:
                    f5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3A:5E:9C:A9:64:F0:F3:B6:4F:60:9A:A9:41:56:BD:39:85:58:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/60fbf9ed-a259-334b-a1c8-e266b1343140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f4:38:2a:44:d0:27:de:af:db:34:85:bf:57:a4:98:73:19:
         60:3d:9e:ac:d7:3c:b5:c3:56:cb:ee:81:82:7b:f6:83:1b:76:
         3c:29:0c:8c:2a:56:c6:dc:fc:be:df:35:c4:f5:b7:a1:53:10:
         02:22:27:71:4d:dc:55:b3:1b:3b:0f:dc:f4:2b:7a:71:54:0e:
         92:47:59:58:a6:43:c3:b7:42:ab:37:83:c4:d5:d0:28:78:e6:
         e9:07:5a:1c:af:ae:76:56:2c:55:6d:10:79:9f:7d:cc:66:8e:
         6f:a3:1a:85:17:f0:4d:89:84:77:60:72:b4:28:9c:58:34:e5:
         c4:a7:6d:b1:2b:ae:86:6f:dd:3c:57:52:f9:8a:68:cb:84:3e:
         58:e3:c4:7b:62:ec:14:46:68:b6:f1:d1:23:c0:7d:84:e2:08:
         2a:21:ad:98:71:70:f4:2d:e3:63:40:39:29:9c:f7:c5:fe:e1:
         34:ef:75:83:25:66:4f:85:e9:4a:80:91:57:c5:80:5c:56:49:
         b2:ee:8b:13:a6:18:20:f2:7a:1e:f7:ee:4e:e7:21:f4:52:e6:
         87:06:63:b3:a5:0f:e4:bc:15:23:c9:6f:6f:44:8d:cb:7f:5d:
         f1:07:26:6b:5c:f3:68:d5:ba:29:36:30:78:14:31:2d:1a:56:
         a9:f8:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:09 2025 by rpki-client