Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
File:                     05243640-ba9f-3af3-a94d-0215983cabee.roa (raw, json)
Hash identifier:          lqK45ohP95v3zZrhGG3AWwXIPQtCOd7nHrhv8enR8NU=
Subject key identifier:   73:AE:ED:FF:E5:AC:66:2A:5A:88:33:6D:38:B8:F7:25:08:47:99:36
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B4081A084AC21ACDBB00BE940
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     398549
IP address blocks:        2605:dd40:8d00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:a0:84:ac:21:ac:db:b0:0b:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=43e208f3-4bc9-4e3e-b0bf-4fc1aa33e734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:b0:07:8a:ba:08:de:1a:27:9c:84:ca:5c:
                    ed:7a:99:7c:3a:fe:f0:d3:59:e2:0f:f4:38:78:37:
                    ee:f1:c6:2c:4f:f3:e0:e6:e5:9d:e5:8b:50:f4:31:
                    9d:cd:84:81:1d:69:c8:33:97:0f:5e:85:c4:77:40:
                    02:75:31:71:54:5e:64:44:04:5b:79:79:31:aa:5f:
                    7c:70:3b:25:3c:12:50:0f:ca:10:fa:0f:44:6e:f4:
                    56:c4:2f:02:02:b0:6e:f0:d8:b4:21:42:f1:89:ae:
                    31:08:c2:9b:40:2f:44:12:b1:46:bc:e3:0e:5e:20:
                    15:4b:38:b7:24:ac:e9:90:40:58:47:33:3c:bc:f4:
                    b2:e4:f1:12:c4:72:35:4e:93:70:36:79:af:65:7d:
                    ad:78:3d:5d:6e:75:cd:ef:51:0a:54:d3:73:30:3d:
                    f4:1d:80:5b:f8:63:93:9e:ed:fc:42:d4:94:a9:1f:
                    91:71:c8:c1:3a:23:9a:38:8a:c5:c2:9e:39:92:c7:
                    86:b7:6b:37:7c:c9:0e:5a:38:1b:f9:58:27:bd:32:
                    34:63:48:81:f6:46:d5:52:ab:4b:47:90:75:53:bd:
                    7d:de:a3:5b:4f:f1:ed:37:94:37:fd:2a:82:37:34:
                    2d:e7:4c:18:fc:13:ad:7f:aa:8c:ec:2c:b6:05:9e:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:ED:FF:E5:AC:66:2A:5A:88:33:6D:38:B8:F7:25:08:47:99:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/05243640-ba9f-3af3-a94d-0215983cabee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8d00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:30:b3:96:5a:45:41:63:42:b4:4a:58:16:b1:b2:52:f1:51:
         6e:67:09:fa:e4:26:0b:3a:f8:be:b8:c0:aa:eb:fe:21:16:37:
         87:4f:99:c3:d2:b9:52:60:70:d5:a1:9a:03:bd:4e:ae:da:f9:
         e0:6d:26:3b:47:1d:0d:6b:f3:a9:e9:94:26:94:05:8b:02:bb:
         17:be:c3:6f:cf:ab:0e:c2:6b:83:32:84:96:ff:37:2f:aa:96:
         6b:fd:9d:db:77:f7:07:9c:13:ac:93:b0:91:aa:ff:ea:59:f4:
         72:af:df:17:76:0b:c6:b0:c7:ef:33:3d:7b:4c:95:0d:3e:77:
         a1:35:ef:88:d4:23:61:34:ef:59:c5:52:d9:96:a6:d6:4d:ec:
         4f:d6:85:40:16:e7:a5:6e:98:60:c1:f5:7f:ab:d5:8b:b9:0b:
         34:cb:16:82:42:1f:8e:a7:2c:74:7a:6f:9e:ca:34:b3:3d:7c:
         89:b0:81:3f:df:b9:68:de:12:54:6c:b1:e4:22:b0:b9:d9:fe:
         f2:2b:d8:5f:bf:05:3e:e2:44:73:08:05:9b:92:f3:9b:09:0f:
         53:aa:68:99:8e:d3:a4:aa:ba:2a:ad:1c:05:44:f0:30:b8:62:
         b2:4b:45:aa:31:65:ff:28:3c:9d:62:3d:4c:fd:ef:93:36:d2:
         65:1d:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:26 2025 by rpki-client