Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
File:                     386f2b26-4a36-3769-ad36-2706cdf55418.roa (raw, json)
Hash identifier:          KrYou6CeLj4byDYlpn+A1mgjPT4Lk8DYpCrki37Eck0=
Subject key identifier:   16:B6:8A:12:96:50:15:46:66:32:39:E2:84:BE:53:55:8B:0A:82:D0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5224C747B4729A7C3ACA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8177::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:24:c7:47:b4:72:9a:7c:3a:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=9813062f-2813-48fc-bb64-638aeb254edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:59:eb:c0:c2:9f:74:e7:aa:6b:74:a7:57:
                    ba:6a:35:ed:32:9e:36:cd:e7:c6:da:2f:43:dc:be:
                    c9:84:dc:f9:32:c7:c4:2d:b5:d3:ec:f1:82:9a:fd:
                    92:df:f6:d7:6e:8f:da:3d:0d:59:b6:72:a4:e3:2a:
                    ca:99:ae:08:5f:50:23:85:ba:dc:f6:9d:57:0a:19:
                    34:cf:38:1d:06:1c:77:c1:67:75:1b:11:f2:7d:96:
                    84:03:8b:16:56:c6:5c:ce:49:d4:02:77:bb:25:f8:
                    99:01:ed:89:c1:2a:9b:f7:13:e9:df:19:be:fc:32:
                    fa:01:a4:62:13:22:10:df:b7:bc:d1:7c:27:11:70:
                    b0:dd:6c:82:c9:04:81:58:c1:d7:ab:c2:0e:ea:47:
                    dc:27:de:4d:74:71:53:56:04:17:cd:b1:c2:1d:15:
                    b6:64:02:5d:5b:84:fe:c8:41:21:5b:0f:fe:14:e7:
                    3c:cd:67:4c:bf:1a:c6:9c:3d:1a:c8:1b:1c:f6:7a:
                    68:6d:3e:bd:9d:c2:49:cd:b9:da:25:9c:4e:b5:e6:
                    72:41:3a:22:e0:ef:a3:ad:14:db:73:46:39:76:08:
                    74:cf:85:1c:37:de:c3:bb:f3:d5:97:dc:1d:b0:ac:
                    6b:83:f2:ab:39:04:d5:cc:ea:74:8a:05:a5:39:90:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B6:8A:12:96:50:15:46:66:32:39:E2:84:BE:53:55:8B:0A:82:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8177::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:c6:c5:8f:46:11:fd:66:f5:15:3d:d5:b6:de:84:93:e5:
         dc:1f:ee:14:69:15:97:df:35:49:9a:e1:be:5b:56:24:87:15:
         ec:e1:a5:fa:9b:62:bd:17:03:68:de:f8:c4:18:42:72:ec:95:
         28:cb:7e:5e:2d:eb:46:0b:46:ec:4b:7a:de:d2:f2:69:b0:04:
         38:28:df:d6:bf:ca:f2:30:6f:fe:87:4c:29:60:79:5a:ab:60:
         bd:5d:3d:6d:a4:df:1b:4c:87:6c:4c:69:bc:e0:c6:9f:9e:1a:
         4d:2e:7e:ae:a2:a7:3e:1a:18:cc:e1:d4:42:4b:12:9e:6e:3b:
         ef:01:83:d8:58:06:6a:c7:a1:54:47:dd:8e:a4:8f:6c:71:8f:
         50:24:8a:b8:a1:7a:95:c3:9a:f2:55:02:a0:36:cb:3e:b1:79:
         66:6c:f9:d3:71:17:6e:fc:f0:60:b3:0e:80:99:08:8b:4c:bb:
         42:9e:31:4b:f8:44:b6:5c:c5:8b:17:52:ca:1d:8f:90:b1:13:
         8c:82:5a:5f:cb:a6:3a:32:8e:ee:c7:fd:a0:a1:63:94:18:d6:
         f6:c3:12:1b:fe:c0:ac:95:d4:17:69:5d:b7:17:3b:35:43:d9:
         7c:c5:a8:8b:9f:98:b3:61:b0:55:49:4c:c7:0b:5c:5a:88:be:
         4a:52:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:02 2025 by rpki-client