Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa
File:                     c20badee-9057-3bd2-9eae-6e452c4e55e9.roa (raw, json)
Hash identifier:          0s4tk+XAD3LYOH/zW3vIAIaBU3rXgziaJUXggiGV1IY=
Subject key identifier:   F6:AE:4B:29:14:32:1A:31:7E:B3:1C:34:97:7C:3A:84:98:47:F6:EF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A73AE2AA87E6E2C2B80780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:568:201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:3a:e2:aa:87:e6:e2:c2:b8:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=9fc9c988-632d-4085-9626-12a7b979437d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:80:c9:05:1e:a3:32:5f:7a:23:32:12:88:
                    8b:49:1a:38:da:63:e4:d0:06:b5:0a:b7:62:8b:44:
                    86:7a:c7:ef:6f:e1:49:6e:86:bb:dd:88:94:b0:75:
                    1a:84:90:1e:49:b4:fc:50:d1:79:c5:9b:51:df:d8:
                    b5:69:c0:6c:33:6f:e3:79:3d:5d:98:62:ca:a9:01:
                    87:fb:5a:e4:21:3d:eb:54:ba:49:10:26:75:37:a8:
                    ad:89:d1:cf:5b:d7:7e:b1:6f:94:02:c5:85:4c:6e:
                    7d:83:13:3d:ca:1b:43:84:bd:61:a8:a1:f9:2e:44:
                    e2:26:f3:29:f6:4c:bb:4c:1d:38:8a:5a:58:3e:b1:
                    a6:57:8f:44:07:08:fb:c4:b7:c7:1d:07:29:31:00:
                    1c:78:7e:ed:af:b2:b8:ba:ed:18:9e:ab:0c:59:3e:
                    93:ca:82:41:20:0b:2e:ae:d7:fb:52:d2:ba:96:10:
                    57:60:df:c7:a1:ef:8a:58:17:bf:c2:58:61:40:1f:
                    a9:3b:f3:8c:14:ce:db:03:4f:b9:e1:fa:63:90:2a:
                    7f:ff:1a:33:4d:29:b1:7c:2d:61:5c:86:59:65:b3:
                    e4:21:09:54:d5:d3:23:d7:50:73:5a:bb:47:b3:4d:
                    68:5a:4c:73:60:3a:97:3e:49:ea:1b:d5:3e:b2:6a:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:4B:29:14:32:1A:31:7E:B3:1C:34:97:7C:3A:84:98:47:F6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c20badee-9057-3bd2-9eae-6e452c4e55e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:35:48:d1:e0:8d:18:58:33:68:a4:b6:cd:26:8f:74:76:
         90:88:a4:ff:39:39:27:d7:61:70:0d:2a:e4:f7:2b:c2:53:0f:
         7b:2b:57:63:2c:0f:27:19:7c:da:24:89:27:15:32:15:8d:4f:
         e6:97:2b:73:0b:78:20:22:11:1c:66:13:ec:46:86:40:84:07:
         a0:f1:21:db:e5:01:c4:f6:5a:47:90:31:43:74:18:d3:5f:d1:
         0c:8f:c5:fe:64:68:84:64:80:2b:b0:66:61:61:43:66:cd:96:
         3c:85:14:f5:da:cb:60:dc:07:b8:99:ab:dc:13:30:3b:44:81:
         83:a7:a0:bb:da:77:ff:85:d7:b8:b2:05:8f:36:c5:a7:02:44:
         38:80:b9:45:27:cb:96:77:3b:0d:24:ca:d4:b3:86:56:fe:57:
         c0:f0:27:3d:41:97:63:76:fc:c7:ec:18:98:60:5b:65:cf:68:
         3f:ce:7c:82:3c:ec:e0:52:94:46:61:ca:49:d4:53:01:de:66:
         2f:6d:95:24:a7:44:32:7a:79:11:f4:f0:f5:93:54:75:d1:fc:
         17:b0:65:1e:d0:cf:d5:c6:8a:0b:a1:a0:68:1c:a0:d3:76:0d:
         fc:f6:7b:66:56:9b:d1:da:90:68:c0:3d:d3:b6:c7:44:1e:cf:
         03:dd:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:32:41 2025 by rpki-client