Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa
File:                     ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa (raw, json)
Hash identifier:          kzb69bdJJQ4lXow9amOcmNVTz90jFIh0Pa+aDNQeHs8=
Subject key identifier:   87:DB:53:A1:47:7D:04:0B:7C:76:FC:27:91:73:C9:63:89:73:26:44
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD77B3540C74F05E3245D3
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        2600:1900:40d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:77:b3:54:0c:74:f0:5e:32:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=77c43914-4105-4aa8-a300-463695db6339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:2c:6b:91:ba:a2:be:ee:5a:de:51:97:d9:
                    c2:e8:33:46:48:82:3f:73:45:86:29:f5:21:a1:bc:
                    0a:82:98:f6:2d:d5:5c:76:a4:96:23:22:2b:cf:db:
                    f7:5f:d6:0a:a8:f0:48:91:16:f1:df:43:a6:84:8e:
                    bd:26:fc:fc:0c:41:bd:8c:5d:b5:8c:15:2c:35:b4:
                    79:38:3e:99:6c:ed:7e:dd:91:30:ac:bf:f9:c3:85:
                    b8:8f:9b:ec:f4:fe:de:e4:50:ba:9f:6d:bc:43:a5:
                    10:e9:a8:bc:16:3c:11:aa:d5:4b:a5:95:81:5a:8f:
                    ca:b1:67:a3:db:71:08:5b:4f:39:e6:94:2c:69:9f:
                    f4:13:14:17:8d:bb:8b:83:07:fc:d4:94:e3:28:82:
                    53:ee:49:91:45:81:bb:01:8b:80:f3:63:93:61:de:
                    9d:77:ea:22:f2:ba:1b:0b:b6:e4:fe:b7:ee:4c:c3:
                    d4:b7:d4:ef:0d:63:39:1e:aa:a4:83:13:5f:18:9a:
                    eb:de:45:05:5a:ae:38:e1:b5:92:53:9a:7f:ad:eb:
                    57:9d:c0:45:12:30:0f:6d:09:2a:1f:9d:ac:90:e1:
                    ac:d0:d6:4d:5b:43:de:b9:f8:17:b1:b4:08:83:f8:
                    03:c5:f1:20:88:3b:df:f2:92:58:6f:98:95:1e:b1:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DB:53:A1:47:7D:04:0B:7C:76:FC:27:91:73:C9:63:89:73:26:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:40d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:e1:07:24:e0:e4:6e:39:7a:b4:3b:a4:a9:ab:8b:d7:83:
         96:ca:7b:04:a2:32:d1:9b:12:55:f5:d2:30:99:bd:d8:c1:81:
         97:24:b7:dc:b6:13:49:26:4c:30:df:98:0f:e3:f6:ce:4f:22:
         4a:27:f4:e2:2f:fe:4c:03:91:c2:d2:db:14:3c:39:1e:e0:07:
         ba:63:6c:69:d6:34:59:f7:63:01:db:cc:2a:98:27:81:6e:4f:
         65:db:b4:f4:1e:0d:91:3d:41:d6:9f:45:1a:17:76:38:fa:46:
         8d:1f:ed:11:d6:bd:bf:88:20:e6:85:ed:a0:32:7f:f7:8a:55:
         70:6a:54:51:22:9e:6b:d0:2b:44:c7:79:89:b3:f7:a1:6c:ac:
         ae:b4:5c:4d:87:e7:05:73:90:96:91:23:f1:ef:77:51:6b:da:
         ee:e6:72:40:0a:1c:2e:93:94:42:ca:0e:b5:5c:86:0f:b1:54:
         b7:b4:9a:52:0f:c2:4a:f6:b5:f8:87:25:e6:e4:2c:25:ce:25:
         84:f5:1b:21:7e:2e:c8:5f:60:f1:56:c7:ed:52:de:64:36:2e:
         23:28:f2:dd:88:04:22:10:d6:71:55:64:a1:5e:de:c6:ec:b8:
         7b:0a:30:08:3d:b9:33:34:9a:d9:2e:e2:bb:a7:1b:15:a3:e6:
         5c:7d:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:41 2025 by rpki-client