Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa
File:                     8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa (raw, json)
Hash identifier:          zChoJAmtgdamoEd9izpZ3nsrUtZ+g51Lgn+BrY8U2Hg=
Subject key identifier:   EB:29:CB:8D:F7:A5:DB:58:76:42:6F:CA:E2:71:89:67:AF:23:D9:BE
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B6A61E065E369193A6808DFC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     54994
IP address blocks:        2607:b300:fd08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e0:65:e3:69:19:3a:68:08:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=37d0912a-4292-4025-a8b9-b31230f389bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:ab:ba:5e:0b:31:e5:33:3f:c2:48:a6:ce:
                    dd:ff:7b:f3:ee:2f:33:a1:7a:1f:45:0a:1c:38:fa:
                    6b:27:42:5d:65:eb:0d:24:75:08:70:97:e6:90:a9:
                    f4:5a:73:c9:fb:4b:35:a1:50:f9:13:c6:c6:e2:ff:
                    c3:c9:87:47:fa:86:2f:5f:50:6b:47:76:38:47:f9:
                    12:55:b0:cb:ae:79:15:ff:8b:3d:85:8d:09:34:c6:
                    05:66:2d:9a:2f:b3:c6:54:9b:cb:6a:f6:97:1f:32:
                    11:9b:81:52:24:95:75:31:5c:4c:89:af:a4:9b:b0:
                    89:ff:9a:56:79:5a:7c:6e:42:95:50:1c:46:34:17:
                    14:08:e1:58:28:69:76:f9:51:7e:ef:73:c6:ab:bc:
                    05:38:5d:76:43:10:f6:4e:3c:f0:28:08:f4:f0:14:
                    07:98:26:46:c2:e4:07:e4:46:ec:a5:4b:61:af:a1:
                    b4:1c:fc:ad:1c:4a:ab:28:7e:68:c0:d4:7c:9b:e7:
                    18:c2:56:e2:07:04:5d:7d:e2:81:df:45:77:82:ad:
                    9b:6e:30:45:11:60:cd:d1:ca:9c:38:49:1a:3e:cf:
                    34:3c:54:ff:39:2b:07:39:60:5f:17:12:0d:76:89:
                    63:34:20:17:c2:b5:03:d8:bf:e1:fc:ea:70:d3:c2:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:CB:8D:F7:A5:DB:58:76:42:6F:CA:E2:71:89:67:AF:23:D9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8dac55a8-ba25-329c-a1c9-2c03a9e9da2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:18:cf:a0:2b:56:3a:ec:f1:46:fc:c1:7b:e3:96:c5:c2:
         61:fc:39:8b:6a:37:3d:f6:5d:72:1b:44:6e:d1:8f:cb:89:28:
         d0:3e:53:e4:a3:5f:04:98:58:0f:f8:b4:e3:d4:ba:7a:9c:4b:
         72:cf:0f:2c:c7:3b:e4:a6:cb:87:17:21:ef:49:f1:c9:96:63:
         a9:d2:67:30:a0:c1:54:19:c2:9d:f0:1c:89:bb:e9:01:bc:cf:
         15:13:37:7a:3c:7d:37:c9:7a:7f:0c:e0:16:8a:da:da:c4:1e:
         6e:f2:ee:6e:a7:22:bf:ff:f1:da:85:a8:c4:90:2c:50:e9:fd:
         9e:37:b5:65:f8:87:59:4f:f1:a3:0b:db:19:88:03:1e:45:b9:
         10:77:02:b6:64:bc:6c:cc:34:dd:08:c1:0b:cd:bc:a7:3d:a8:
         78:7c:18:c8:e0:65:03:ea:3c:35:7f:cb:6e:83:e3:3d:0e:5b:
         ec:d1:b5:95:c3:d2:6e:ef:ad:9a:a2:c1:0a:ea:5e:91:dc:d6:
         7e:f8:b0:4d:bc:66:c2:cc:18:66:2d:53:a2:73:4d:f3:2a:ae:
         8f:c0:a6:27:b2:74:80:f8:7c:33:5d:45:0c:41:83:57:65:1f:
         f2:66:2e:23:dc:ff:d7:ce:d5:19:20:41:0b:0e:65:02:af:8c:
         cf:78:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:16 2025 by rpki-client