Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
File:                     94457b64-2815-3821-9ce4-67d95b994827.roa (raw, json)
Hash identifier:          F08XvshpKA0BCjH/5Y8XO0v6g5gRzLpIiXFj3IGowog=
Subject key identifier:   68:3B:D6:4D:59:8D:19:EF:AF:5D:78:13:96:77:86:7B:8C:56:D0:9D
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F4328584B64CE3478F5E829868CC2E580
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        2620:33:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:34:78:f5:e8:29:86:8c:c2:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cfd6d700-cd24-4cc1-a8dc-8912ce29970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:d0:ee:66:3b:eb:c0:a9:17:cf:8e:d1:6c:
                    99:6e:0f:79:d2:db:48:62:43:d8:12:48:55:a3:0f:
                    c1:f0:17:96:21:39:1b:11:12:20:d9:a0:cc:80:20:
                    0e:14:99:d2:f2:9f:ed:da:e8:68:66:e1:65:22:83:
                    f2:1b:f2:10:30:1c:e5:ca:02:3b:c4:9f:bb:9e:71:
                    6c:c5:c6:1d:08:04:3b:7b:ad:cf:d4:38:aa:7f:df:
                    97:9c:27:bd:f1:07:a5:80:95:a5:24:27:24:2d:89:
                    ec:10:4a:1f:f1:fa:86:4b:2d:8f:be:dc:c3:a7:e2:
                    c8:2b:ec:43:f4:f7:b0:90:e2:53:0d:f0:4c:bc:3a:
                    d4:30:43:f6:f8:f7:cd:f8:b0:4b:cd:ac:62:51:f3:
                    11:7b:68:df:47:a5:4c:ae:cf:be:c8:1f:0a:25:52:
                    94:12:9f:b6:99:c6:61:2c:d5:0e:7d:fa:79:cf:8a:
                    bc:39:47:69:dd:14:5d:5b:73:9f:0b:66:07:a0:e4:
                    97:48:69:cc:e8:69:68:99:03:10:10:d6:1d:f0:2a:
                    5f:67:f9:d8:7e:fc:0e:dd:c8:a4:09:b7:55:36:84:
                    84:3f:e8:ce:32:5a:b8:5f:22:69:7c:48:4a:b2:2d:
                    54:55:2f:e3:d4:70:54:64:95:38:f2:56:df:5a:57:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:D6:4D:59:8D:19:EF:AF:5D:78:13:96:77:86:7B:8C:56:D0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/94457b64-2815-3821-9ce4-67d95b994827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:33:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:48:66:c5:3b:78:95:7a:e3:3a:2b:e3:0f:35:9f:fc:d5:e2:
         ec:13:38:d2:34:d0:ce:c5:3a:bc:f3:8f:ef:bc:7f:0f:7c:ac:
         ee:09:b1:e3:12:65:64:55:90:60:4e:99:18:ec:83:fb:0c:1b:
         e2:2f:96:f8:c2:a8:a9:fa:88:a6:79:17:6b:f2:a0:ef:95:93:
         f4:cd:91:c4:df:07:73:67:f6:f7:19:ae:37:03:ec:d2:23:69:
         52:e0:53:9f:05:92:2c:0d:0a:78:f7:b1:4e:40:a7:1d:83:e1:
         51:0d:fb:6f:a0:6a:42:d3:df:5c:ea:a2:9a:98:43:a5:fc:1f:
         36:e1:be:5f:e8:4e:d8:33:90:29:a6:b8:e7:ad:4a:f9:22:b9:
         4f:2e:68:00:18:21:3a:fe:1d:32:0c:fb:ad:09:de:7f:6c:b5:
         b5:39:3b:3c:76:51:b7:f3:73:53:6e:31:61:4c:94:b4:be:be:
         31:5f:9d:db:4c:7e:f6:f7:e0:95:48:a9:b1:e2:09:31:6b:ae:
         20:09:0d:21:ca:e8:0e:a5:17:25:99:e3:3d:8f:b7:d0:14:87:
         66:b2:d4:5e:8e:f8:e6:0d:be:de:d3:9d:77:1e:ad:2c:bd:8b:
         83:23:3d:e1:15:bc:02:b2:62:13:fc:07:5d:41:38:bc:e1:0c:
         f8:72:28:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:49 2025 by rpki-client