Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
File:                     2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa (raw, json)
Hash identifier:          7mcATaV5yKBdT6GFhDEFF8ZfntlOkb/5meCu0S1FFvQ=
Subject key identifier:   2E:FA:36:8A:81:E3:0F:DB:E9:CE:BB:04:0F:E2:30:6A:59:D4:88:AD
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584B477C6845681748945F968F80
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     57439
IP address blocks:        2605:f440:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:68:45:68:17:48:94:5f:96:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=ab3ab4f2-9d6f-4621-94ad-d05cf7a3c02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:fd:dc:d9:57:23:b2:ee:b6:53:e8:25:47:
                    bf:f4:7c:f3:84:ab:a2:96:4a:b4:36:80:54:29:03:
                    6a:b4:90:85:df:79:f2:8a:91:c8:95:f6:66:42:9e:
                    c5:8c:49:ff:f0:93:9e:dc:88:e2:9d:50:33:f8:34:
                    5b:82:9b:f1:68:6f:12:7d:f3:3e:6e:0d:18:0c:b5:
                    60:94:9d:25:15:c0:b6:6f:18:29:93:ac:fe:fb:88:
                    f1:8b:0b:ae:4a:62:c2:0a:fb:db:81:52:83:62:eb:
                    67:11:16:7c:93:72:61:ba:54:b3:73:92:9b:5d:6f:
                    64:4e:32:c8:85:2e:80:c7:0c:90:33:3c:5e:28:68:
                    47:5d:1a:4d:16:67:55:ca:70:3f:44:66:77:fa:13:
                    89:8d:e5:57:32:78:45:94:8d:a7:c8:28:b3:bf:9c:
                    82:9f:a0:e6:5b:76:34:62:1a:32:ff:a5:8b:20:72:
                    d3:23:39:1b:5e:f7:ae:9c:da:69:18:fb:fc:64:8d:
                    3c:0a:a1:f7:f3:eb:a0:ba:5e:d7:83:62:a8:b7:3a:
                    1a:f1:e2:b4:ab:2d:09:d9:75:dd:4c:c0:55:7f:ef:
                    30:6f:d2:01:73:ca:bb:87:9c:19:92:14:0a:18:63:
                    7d:52:76:54:0a:4b:d5:ed:24:c2:83:0d:c5:75:d1:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FA:36:8A:81:E3:0F:DB:E9:CE:BB:04:0F:E2:30:6A:59:D4:88:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/2a3b35d7-1df8-3a46-8e06-935ce2ee1d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:03:98:6d:7f:d5:f4:09:7d:ef:3a:af:c0:db:43:87:54:
         fe:c7:3b:6e:35:3b:3b:93:36:5a:be:d1:c9:12:1b:90:23:7c:
         fc:6c:d1:14:00:c5:ac:51:6e:9f:25:22:12:13:e3:e3:4a:6d:
         ba:8c:3d:18:84:42:ed:fd:1f:15:2e:25:c4:f2:f2:8e:16:1f:
         95:3f:56:03:1d:35:4c:40:5a:5d:7a:8c:a2:36:a6:7e:b8:1d:
         40:af:24:a8:53:49:4d:63:00:7f:f7:1d:c8:28:7e:be:d0:48:
         b6:95:1d:28:6c:39:58:b3:49:59:3f:da:73:23:a3:e8:b2:de:
         d1:2a:35:8f:8a:a6:74:08:39:00:ab:0d:b5:f5:6c:6d:bc:5b:
         55:39:6e:fd:48:28:40:3f:1a:b7:67:16:3e:75:36:ed:14:92:
         ca:74:7e:8d:f5:5e:a0:f8:af:cf:c5:37:30:5a:36:f8:97:4a:
         5d:54:7c:d9:9d:bc:97:e6:0e:81:41:8e:47:4a:a3:0b:52:ee:
         ce:ed:eb:69:75:a9:0a:19:ed:8b:b3:df:68:44:8e:11:b2:4e:
         b7:62:93:f5:b2:2e:35:14:b5:34:cb:a2:0c:7e:8e:67:89:58:
         a6:a5:21:76:2c:d8:b9:a7:0c:18:51:ff:a7:68:a0:38:a6:26:
         78:1a:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:44:33 2025 by rpki-client