Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/086a62f4-6706-3320-968a-8fb41247b436.roa
File:                     086a62f4-6706-3320-968a-8fb41247b436.roa (raw, json)
Hash identifier:          42pHBp9APMMIqMCgI57wQhV+pGYVv1KhKejbZr60wkQ=
Subject key identifier:   09:E6:2C:85:9A:B4:16:EF:F7:4C:BE:8A:35:0E:27:8C:96:C3:4C:E6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA1E5C2516168EDC5F748
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/086a62f4-6706-3320-968a-8fb41247b436.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        2600:5c00:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a1:e5:c2:51:61:68:ed:c5:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=4031eb4a-8ac9-48f8-874f-d391279b5a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:cf:9f:36:2e:56:a7:24:cf:4e:a5:40:98:
                    1a:f8:51:6e:cb:43:95:d1:7a:4c:23:af:55:40:26:
                    47:ed:e6:9b:10:eb:c5:f9:34:73:ad:d2:ae:28:db:
                    f9:0f:d6:c0:7b:e9:5d:03:15:4f:d7:ea:63:40:02:
                    3b:4b:44:7b:99:68:9e:0f:38:cd:ec:8f:2b:75:0a:
                    7a:d7:68:f7:79:af:c0:43:65:a7:4e:f7:51:2f:a6:
                    e4:6a:5a:5d:00:b7:e3:d0:31:25:80:35:7c:62:87:
                    c6:89:29:75:7b:bd:50:9b:09:0d:58:d5:5e:3d:e1:
                    e0:c0:6e:e4:58:5d:bd:ba:e0:80:4d:45:13:63:5d:
                    c5:40:22:83:72:fa:dc:a0:a3:01:3e:d9:cc:f8:ca:
                    f4:e8:c4:7c:f3:41:69:60:b9:b8:e8:c7:cc:f6:2a:
                    27:cf:de:f7:5d:d8:ff:50:f3:d2:7a:ff:69:12:40:
                    68:d4:ab:a9:ce:19:e0:34:19:80:41:4e:d6:c7:3d:
                    04:e3:cf:bb:82:61:ec:fd:49:1e:85:f8:0b:a5:98:
                    c1:06:99:eb:70:cf:cf:4e:a2:6c:29:66:06:74:a4:
                    26:29:48:d1:b2:23:c0:25:19:dc:ab:a2:e6:70:49:
                    b5:e0:27:a3:49:6b:8b:9f:60:fe:bb:b3:8b:1f:ca:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E6:2C:85:9A:B4:16:EF:F7:4C:BE:8A:35:0E:27:8C:96:C3:4C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/086a62f4-6706-3320-968a-8fb41247b436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5d:45:1c:53:35:da:4a:ba:7d:43:25:1b:49:68:f0:df:7e:
         e1:31:72:b6:b4:fe:66:7c:da:94:26:26:cf:b3:6d:cc:74:de:
         91:83:3e:a2:f4:90:8a:7b:ae:e5:ed:66:9d:97:46:fc:3c:b0:
         a8:3f:2a:7d:42:5b:e2:be:f3:86:53:90:a1:80:46:ff:6c:f3:
         90:b3:93:b2:df:76:9c:a8:75:17:30:af:68:bb:7a:5a:e1:63:
         c8:c9:64:79:21:f3:a1:ed:96:e5:68:2b:45:d9:5b:f0:16:8a:
         95:e9:be:11:7c:bc:db:80:a1:7e:02:af:a1:53:6b:36:f7:c1:
         96:c0:87:d6:02:41:dd:f4:5b:f3:d3:c6:d2:39:d1:91:54:a9:
         6a:d0:13:2a:dc:f4:2b:03:2d:b4:d2:4d:74:f6:48:99:74:6f:
         b8:7f:ab:cf:5d:1d:97:59:82:de:50:6e:55:31:ea:a5:12:93:
         b3:83:9f:28:31:ca:67:b8:66:90:c7:42:54:c3:6c:e4:ca:cf:
         a0:ee:40:5b:64:52:d5:af:e2:7d:8c:61:b8:a3:f1:43:08:74:
         24:97:3a:d5:43:ca:c0:3c:0d:22:7c:d8:e8:84:aa:9f:68:f9:
         94:f2:7d:f6:3f:7c:ec:60:02:fb:5c:02:cf:93:29:d9:e8:72:
         1c:83:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:20 2025 by rpki-client