Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
File:                     0cac666c-efe7-384a-95e7-52d5993c915a.roa (raw, json)
Hash identifier:          HEeWeN3rUhzw6ZOaLEGFtNVK+j5iKpCGRJyn96a+veE=
Subject key identifier:   E4:E1:59:B9:24:FC:6D:E5:1A:03:BA:09:84:D0:66:E8:BC:B1:B2:31
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B68FCAD946B7997EC41501540
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     216321
IP address blocks:        2605:dd40:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:ad:94:6b:79:97:ec:41:50:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=83870d6b-b2eb-4053-93b8-bdea9373ea94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:5a:16:9b:6d:77:36:1a:ff:eb:b4:f7:a7:
                    98:05:7b:2e:ae:43:b2:9e:6c:a1:33:86:ea:d1:a1:
                    c9:9c:b0:13:cb:ab:a4:ff:00:08:fb:97:d2:09:2c:
                    e8:6b:e5:0d:60:33:11:ac:e4:a5:3e:34:97:dc:5e:
                    25:88:b1:d8:f9:26:54:29:3a:2e:46:02:38:a0:e5:
                    21:b9:90:80:6d:6b:03:57:5a:0c:83:80:ef:15:d0:
                    38:7a:d2:60:4e:e3:bb:52:d9:a7:cf:18:74:75:a6:
                    fa:6d:0c:f4:12:50:e7:5b:35:57:a5:e8:6a:70:ae:
                    6c:90:49:55:2a:40:b4:b3:f8:30:73:11:69:e6:d4:
                    e8:fd:67:9e:57:03:56:73:79:5f:03:28:a3:80:ff:
                    37:cd:32:05:84:3c:f5:e3:06:eb:d3:e2:9f:c8:68:
                    69:56:10:7c:96:03:b0:a6:14:35:87:b7:fa:62:2e:
                    6a:c1:1f:d4:c3:de:c9:55:7d:24:a8:fe:4a:08:d7:
                    1d:31:cf:11:ce:eb:1c:3d:1b:a7:c1:4a:c0:94:0e:
                    55:df:d9:2d:5c:6b:dd:35:45:00:5a:dc:0f:6a:23:
                    64:45:74:e2:8f:0f:4d:50:50:db:ed:fc:e6:e2:70:
                    d0:f2:3a:e6:2f:83:73:43:1f:43:ed:23:30:b0:2a:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:59:B9:24:FC:6D:E5:1A:03:BA:09:84:D0:66:E8:BC:B1:B2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:18:09:f5:ab:15:51:0e:1d:67:6a:5e:5c:09:90:7e:03:d7:
         40:98:90:7e:04:7d:65:ec:b3:bd:f5:84:a6:86:a9:42:c4:59:
         04:38:ae:c1:52:11:95:24:f5:2a:92:f1:91:ff:6a:cb:71:ce:
         3f:3f:77:00:fb:54:17:ea:be:56:fe:08:26:8a:2c:71:9c:dc:
         80:81:c4:3b:37:87:38:0b:40:cd:84:ca:a8:80:f1:70:57:00:
         4d:91:9c:c9:9c:64:52:d0:1d:cb:4a:1d:f4:7e:2e:43:b0:1e:
         15:69:b3:4d:49:d1:2b:34:6b:f6:0b:33:08:f1:35:43:d2:0e:
         f1:b5:e2:67:1a:ed:b8:77:a7:8e:4c:63:2e:05:21:1b:28:85:
         53:55:5e:0d:7d:17:88:42:0c:db:fc:72:b9:27:79:46:bb:d7:
         98:9c:93:76:2d:e7:c3:04:8e:76:30:b9:2b:ad:4b:36:f6:5b:
         d1:30:f9:6f:7c:df:38:21:d2:5b:23:1a:c6:25:c1:b7:a9:62:
         a5:bd:2a:0d:03:cc:d0:b6:2d:e3:95:b1:5c:9d:fb:da:d7:98:
         f7:b3:fa:10:10:3b:b0:34:49:74:e1:59:4a:51:a5:c6:77:2e:
         48:5f:1e:5e:8f:4a:71:bb:9e:51:32:7a:83:ce:f2:70:f1:04:
         71:c9:7e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:55 2025 by rpki-client