Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af93496c-abbb-3b39-9b65-0f6421694ea6.roa
File:                     af93496c-abbb-3b39-9b65-0f6421694ea6.roa (raw, json)
Hash identifier:          wYWjJIZMrcVzVjCC3BB6nZuo7AbNF5N58qo17kG0j1Y=
Subject key identifier:   0C:26:53:FD:CD:4E:01:41:1F:BE:FF:01:26:46:B0:9B:8C:66:D9:49
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522833D6800BB7D9750C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af93496c-abbb-3b39-9b65-0f6421694ea6.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8058::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:28:33:d6:80:0b:b7:d9:75:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=bbb3cb60-60c1-481a-a733-3973da375f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:91:29:0a:fb:08:0e:53:a9:38:af:56:14:
                    75:e6:ed:fb:bb:c1:4d:1f:2c:f1:2a:7f:50:2d:93:
                    79:31:af:96:1c:27:c6:d9:ef:78:4a:4d:86:e1:e4:
                    7f:15:98:6c:e7:a5:ae:52:e3:ff:71:61:47:f8:d9:
                    a9:b5:33:14:54:32:06:a4:bd:57:19:e7:a6:a6:e8:
                    cb:1f:76:c0:78:11:d2:85:d7:0d:1a:35:ca:15:cc:
                    8c:0a:eb:48:5c:7e:ac:c6:a2:d2:a3:e7:54:32:7f:
                    cd:12:a5:52:a9:b1:ff:f1:dc:e5:7b:38:33:cf:83:
                    80:2f:90:82:33:22:65:5b:66:38:42:73:99:ea:92:
                    63:82:69:27:0b:6a:16:bd:27:d9:44:38:84:2c:f1:
                    09:5b:cf:eb:1a:48:ed:6b:53:71:d9:9e:59:ab:bb:
                    d1:98:1c:29:85:9f:01:cb:1f:85:52:6a:fa:55:3d:
                    70:49:b4:1f:d0:90:4e:fb:91:03:a1:5d:e2:22:19:
                    a9:b4:04:47:53:3f:3b:bf:4e:0e:21:b6:b1:13:79:
                    e7:5a:99:de:f8:ee:4a:6f:fc:fa:45:8e:74:5b:1f:
                    72:01:05:fb:3f:d0:d0:4c:cb:b6:9e:68:95:08:1b:
                    13:df:56:ba:a6:a6:20:17:c7:98:63:a1:11:3f:12:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:26:53:FD:CD:4E:01:41:1F:BE:FF:01:26:46:B0:9B:8C:66:D9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af93496c-abbb-3b39-9b65-0f6421694ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8058::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:49:65:d5:e5:75:da:11:49:bc:cb:fa:c9:28:61:02:d7:fa:
         2b:cd:b7:e3:80:2e:ba:f7:da:7f:6f:dd:8b:f4:d8:9d:b5:c6:
         86:8f:07:f9:ff:05:c7:32:7a:ee:43:24:62:27:eb:68:97:a3:
         90:dd:87:51:9a:c3:22:a4:0c:fd:a9:f2:74:b7:c3:b0:55:a4:
         c1:89:fb:9e:0e:6f:f9:be:77:30:3f:07:2c:d5:01:41:b9:5c:
         55:e4:2f:f6:30:a9:71:a3:d7:cf:07:5c:84:be:a6:e5:32:8c:
         45:77:fb:9e:0a:fa:13:43:f1:67:85:fb:8f:5c:a9:0e:0e:a4:
         1a:6f:27:0c:ad:35:e4:5b:cc:bb:c0:59:0d:00:b0:f4:ef:e2:
         3b:06:f9:25:24:49:42:d6:9f:05:47:c8:f4:c0:c0:2f:f8:61:
         35:18:6e:a8:dd:19:82:ad:e7:a1:fe:ec:9b:f9:97:df:06:09:
         1e:81:bc:81:c2:79:30:a6:49:6d:19:8f:a7:f5:1f:5a:5f:ea:
         46:f8:b6:f6:73:58:9c:ae:32:76:45:b0:01:69:db:14:dc:9b:
         5f:f1:92:cd:6a:65:b4:ec:8c:0e:83:27:55:d7:17:ff:46:bb:
         e9:65:1c:db:7f:cd:96:3a:8a:ed:c0:30:99:b9:9c:1d:34:a1:
         69:01:9e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:02 2025 by rpki-client