Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa
File:                     1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa (raw, json)
Hash identifier:          z/Bo8DHSxIrQIocyFdzvqOdtAsL4N3kNbjpgCguy3Kc=
Subject key identifier:   08:F4:9A:93:06:24:2E:FB:8C:E0:C7:EF:4D:16:7C:C1:D5:3E:E5:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F525435C1A45BB64F50AB40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8187::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:54:35:c1:a4:5b:b6:4f:50:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=24daf5f8-6477-475a-b3cf-31d1a2f2ebbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:a2:4b:17:52:8b:33:a0:20:b1:d9:a2:84:
                    10:e1:75:5c:fe:d7:f2:e6:c9:6b:31:34:e7:16:00:
                    31:c4:28:c6:70:cd:1f:85:ad:22:2e:1c:db:37:b8:
                    5e:f1:63:5b:f8:d6:e4:36:83:7f:f7:a8:ac:61:ed:
                    c9:6e:a1:b1:0b:70:fa:50:ca:c4:89:20:fe:f1:c5:
                    a7:69:59:ac:d7:cf:68:2e:8f:89:11:9a:8f:49:f6:
                    6a:79:da:68:29:97:a9:84:53:bf:3d:6b:4a:77:c3:
                    6d:ff:04:13:97:5a:37:64:8c:e2:11:88:a0:0d:ad:
                    eb:10:f4:15:c7:5b:c0:61:b6:17:3c:2e:40:00:05:
                    20:2e:1e:1f:5b:4b:1a:53:dc:56:04:5b:f0:2e:f4:
                    e0:4f:6b:8a:42:68:b4:0f:e9:53:8c:14:bc:4e:80:
                    33:7e:81:40:fb:d6:c9:61:65:e0:52:b9:9a:8b:0b:
                    8c:4e:4f:32:8c:5c:8d:03:6a:be:2c:95:4b:1a:01:
                    21:59:e1:f2:6f:4d:d2:aa:6f:ac:ca:eb:f5:0a:b6:
                    db:24:b7:87:2a:5c:7f:73:4a:09:12:a7:65:de:66:
                    70:3e:88:f7:77:48:04:4e:c0:ea:4c:11:ec:ab:e7:
                    ad:a5:94:c0:af:51:ac:6a:49:67:89:39:0e:07:9c:
                    fc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:9A:93:06:24:2E:FB:8C:E0:C7:EF:4D:16:7C:C1:D5:3E:E5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1d9b3a2c-f734-3bc3-8bde-6d5747a65920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8187::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:66:94:ba:b8:47:13:31:26:be:e0:7c:ef:df:95:6c:ea:
         7c:5f:31:ba:3c:7a:56:9e:78:12:5e:79:98:aa:9d:cc:bd:5f:
         46:2a:05:78:bd:a5:e3:14:35:85:94:12:f7:77:87:18:f0:bb:
         2c:ed:1b:df:16:b4:71:dd:f3:c0:3b:b8:e3:02:33:e1:92:77:
         f0:b9:a6:0a:b6:93:30:4b:19:76:fb:2d:75:7b:36:98:d3:c4:
         7a:56:77:db:0d:77:92:cf:27:5c:f6:cd:a9:7c:c7:b8:2e:80:
         ce:82:82:f7:85:12:c2:8b:f2:71:18:9f:43:5b:85:53:e4:3e:
         f7:87:c1:50:b5:4d:bc:73:28:3b:0d:87:1e:ea:4d:2a:e1:a3:
         69:54:35:d6:0e:99:d4:2c:0f:6d:c2:d7:fb:ac:cb:1b:ce:68:
         58:e2:48:f1:ef:de:66:10:4a:7f:3f:71:9c:c1:da:d2:2a:86:
         79:dc:55:1a:1c:a0:d2:7c:fa:a6:f9:46:2a:e7:59:1a:d0:67:
         c9:f9:44:fa:13:b3:d2:79:f8:ab:81:2e:32:67:7b:b4:ab:5c:
         2c:c5:10:f8:2a:02:e4:e5:99:50:2d:93:97:41:30:ab:25:f2:
         94:4e:e7:99:49:0a:e5:23:81:88:29:36:25:08:d0:26:20:67:
         b7:a3:6c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:25 2025 by rpki-client