Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
File:                     cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa (raw, json)
Hash identifier:          xTmPiessgVDOIUWWzZW+IXprcUJWKTLxCCVgSRRlVnw=
Subject key identifier:   13:71:AD:B9:76:B0:D4:19:00:67:0D:70:18:79:DC:47:92:1E:5D:94
Certificate issuer:       /CN=0575435f-d6e9-4d29-9519-fff0e513c74e
Certificate serial:       010D0C9F4328584B434C6D97198C188C2405CB00
Authority key identifier: 41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396319
IP address blocks:        2601:1308::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6d:97:19:8c:18:8c:24:05:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0575435f-d6e9-4d29-9519-fff0e513c74e
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=243c85a4-2312-4441-98bd-1460b92f7811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:ea:a3:42:a8:8a:35:b8:36:ac:8e:fb:c1:
                    40:e6:3c:3f:0f:ab:3e:6e:2d:15:8c:b6:e5:0d:c8:
                    a6:90:2e:11:5d:35:8a:76:a9:6f:df:0c:a6:0b:7d:
                    af:38:8a:b7:fe:04:71:44:dc:5d:f9:4a:b9:73:ff:
                    1a:c6:95:62:a2:c0:d6:ae:ef:35:7d:06:97:36:0d:
                    3e:99:7a:6c:20:86:f1:cd:57:aa:23:c9:a5:a8:1b:
                    c6:f0:ea:40:5b:6a:b1:8c:7c:1c:b9:8c:ab:b5:85:
                    9e:88:bf:8c:4a:d5:61:c3:88:a4:b4:70:50:1b:f2:
                    02:27:a7:d4:2d:d0:db:e3:a9:dc:26:3e:0e:d7:40:
                    14:35:35:83:d9:63:a2:b8:6e:af:84:29:35:69:c3:
                    87:a7:6b:69:8b:e8:0a:99:9f:44:9b:e8:cb:9c:56:
                    82:4f:81:2a:43:04:c9:f4:d1:53:e5:df:de:f0:9c:
                    b7:b1:88:8a:8c:8b:f7:ab:7d:5d:94:00:3c:23:1b:
                    e4:93:fa:bd:45:4b:0c:65:4c:0d:c1:e4:b5:d4:c4:
                    de:d9:ca:c5:07:e5:47:bd:b0:16:ca:de:d7:83:ec:
                    f0:5a:0a:14:6f:c0:99:0c:f2:ee:48:8e:64:59:d1:
                    59:0e:53:f7:72:3c:4a:46:a3:2f:65:0a:8b:9d:9a:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:AD:B9:76:B0:D4:19:00:67:0D:70:18:79:DC:47:92:1E:5D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/cdbf7809-2cad-3a97-b1b0-ceb4ac5a7f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e/0575435f-d6e9-4d29-9519-fff0e513c74e.crl

            X509v3 Authority Key Identifier:
                keyid:41:C9:F1:A1:D4:C8:09:6A:B2:CC:4B:35:7E:06:B0:CE:91:7E:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0575435f-d6e9-4d29-9519-fff0e513c74e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1308::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:58:b5:13:c3:33:90:44:b4:fc:7d:1a:7c:04:6f:40:f8:90:
         20:41:fb:15:4b:a7:1a:d2:0b:cb:f0:e6:58:5d:4b:20:c2:34:
         28:37:5b:9b:06:2b:69:7d:0a:be:c9:ed:c7:47:45:04:16:64:
         6f:c9:7e:4b:4d:20:0b:8b:41:e6:43:68:7c:09:16:2f:2d:c2:
         e5:79:f3:2d:29:15:24:11:70:5d:9c:a0:b9:19:29:ca:56:44:
         d2:1e:d4:e3:46:2a:66:8f:c3:2c:e0:d3:aa:fc:2d:1f:da:00:
         54:09:f3:93:b7:66:0f:90:82:86:ff:07:53:88:80:79:e7:33:
         36:3b:28:5a:27:c0:05:fe:5b:08:dd:d5:b4:64:b3:62:69:b0:
         ba:15:1d:32:dc:40:3e:7c:71:30:de:a6:18:cd:33:b0:e0:72:
         db:69:a3:fb:00:6b:3d:ae:5f:95:69:b0:0a:9e:f0:50:4f:e4:
         31:41:65:54:14:ed:17:db:45:9a:d0:e3:5f:a2:4e:eb:f3:9c:
         33:fa:b2:e7:97:95:5a:33:fb:78:9b:d5:e2:3d:54:4b:ba:28:
         a0:d6:42:53:c3:a9:5f:14:3b:98:76:fe:71:7e:f3:1a:dc:32:
         c9:ff:10:d8:97:25:25:14:62:a2:28:5b:26:68:ea:fd:c3:3d:
         19:56:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:19 2025 by rpki-client