Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
File:                     1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa (raw, json)
Hash identifier:          7cA6esFpIPZZIIcjGyKnfH/tVtLn2iQIyr2TfOKP5z0=
Subject key identifier:   8E:32:0F:47:EC:EA:08:4E:59:A5:B2:2D:E8:F3:3C:08:7B:20:CE:36
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584B7DECA10595EB229860D48640
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     20055
IP address blocks:        2600:a800::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a1:05:95:eb:22:98:60:d4:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=5fa1e268-c11e-4389-bc54-516c747a17bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:ac:25:22:30:80:ea:d8:04:74:ab:76:46:
                    3c:29:2e:03:f0:a6:67:bf:8f:53:58:66:a5:ca:53:
                    71:31:47:5a:51:4f:d4:a5:a9:c2:c2:6e:af:4d:83:
                    40:3a:e4:68:86:64:7e:eb:90:94:48:4b:65:9b:3b:
                    2d:4d:4a:a3:c6:87:3a:3e:2e:52:4b:04:b8:25:f3:
                    d2:1f:b8:49:9c:ab:ac:e1:6d:41:04:80:80:96:d2:
                    eb:92:0f:07:32:8a:82:a3:ab:04:ce:8c:67:82:ff:
                    58:37:dd:9b:35:e7:da:57:55:f9:35:cb:8e:52:97:
                    c9:f3:3f:01:e0:71:88:49:db:63:c2:e0:74:a3:5b:
                    84:c6:cf:a9:2e:cd:63:84:70:92:8a:47:09:59:dd:
                    57:a5:7f:65:70:74:19:65:b7:9f:79:e4:75:89:42:
                    0d:cb:23:c5:6e:10:4e:6c:0a:65:b8:76:63:9e:4a:
                    a9:87:af:e9:c2:4b:ef:4d:9a:9a:6b:e2:f2:1f:bf:
                    0f:53:b1:c5:8a:36:3e:e0:29:48:8b:c2:8f:17:4d:
                    2e:3c:52:ec:78:7d:a5:d3:f6:c0:e4:6c:39:4e:e0:
                    ff:25:30:b5:c9:50:2d:cc:6f:ae:44:6a:1d:f3:3d:
                    34:6b:78:c1:8c:76:fc:4a:21:71:cd:20:46:45:74:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:0F:47:EC:EA:08:4E:59:A5:B2:2D:E8:F3:3C:08:7B:20:CE:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/1ffc6e36-b24f-3f09-b913-6a3dfc9fa377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:99:08:73:a1:87:a5:2f:1d:6c:a6:a8:0c:af:09:b6:b2:d7:
         2f:6a:e3:6d:77:2b:12:e8:b8:13:51:41:1d:dc:9e:a6:5b:e0:
         78:9e:98:4a:e6:09:17:4c:a8:98:13:47:7c:ed:23:55:e7:77:
         50:4c:5c:3b:f9:6c:c2:9d:0a:db:bf:2e:72:10:4c:93:e5:65:
         28:e4:60:0e:bb:2c:8b:b6:05:4b:0a:fb:08:4f:0b:8c:7c:ab:
         1a:3c:a1:47:6c:d5:c2:24:83:b4:d8:b6:76:d2:45:3f:00:a6:
         10:9b:cc:99:02:c7:14:04:35:74:95:71:f5:29:47:e3:99:9e:
         d3:73:80:9e:70:4b:fb:f0:db:8a:7e:d1:6a:96:d8:b2:89:df:
         ec:c2:e7:aa:5d:ae:e7:a5:0c:f2:29:b3:5c:31:57:26:eb:db:
         7d:53:42:5a:aa:97:c4:03:66:5e:3d:b4:89:78:c1:a7:27:f1:
         f4:03:9e:a6:d8:3c:50:f9:9e:eb:f1:94:04:3f:6d:9b:19:ee:
         a0:e2:da:90:0d:dc:e5:a3:54:61:ab:bd:95:f2:55:16:00:db:
         92:1b:1c:a4:8b:cc:98:ab:5a:6a:b6:3e:aa:8c:6d:a2:08:b4:
         e2:af:c1:36:b9:09:17:92:fa:2c:43:c6:0e:79:b5:ce:9f:e1:
         96:29:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:20 2025 by rpki-client