Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/e5abe283-61fd-3f8b-9722-85ccbed835f7.roa
File:                     e5abe283-61fd-3f8b-9722-85ccbed835f7.roa (raw, json)
Hash identifier:          bbFH0kNEWAw8bhAt7rPoMbO1rsRJc5ouVuH84bTrLd0=
Subject key identifier:   C0:02:BA:EB:18:43:50:DC:EC:BB:46:FD:3B:F0:96:5E:33:41:6F:83
Certificate issuer:       /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
Certificate serial:       010D0C9F4328584B8DE5EE9F9C6A762812F45180
Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/e5abe283-61fd-3f8b-9722-85ccbed835f7.roa
Signing time:             Fri 17 Oct 2025 18:19:58 +0000
ROA not before:           Fri 17 Oct 2025 18:19:58 +0000
ROA not after:            Thu 15 Jan 2026 19:19:58 +0000
asID:                     14618
IP address blocks:        2604:1fe0::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:e5:ee:9f:9c:6a:76:28:12:f4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
        Validity
            Not Before: Oct 17 18:19:58 2025 GMT
            Not After : Jan 15 19:19:58 2026 GMT
        Subject: CN=9ace2cbf-3f36-4fe1-a227-f53f56ed2a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:98:89:53:00:24:9b:3a:4c:93:83:42:51:
                    5c:e5:91:55:cc:03:69:3a:ae:04:ea:36:a9:99:04:
                    22:eb:d2:d9:bb:4f:81:04:12:f4:e0:c3:42:63:be:
                    7b:73:92:bf:e2:c6:bc:60:31:cc:0c:a8:f1:b5:d5:
                    5e:6e:65:85:dc:af:48:c9:9b:6f:4b:dc:35:c4:0c:
                    8b:0a:24:05:ca:03:2c:13:a2:23:af:8d:81:be:40:
                    75:48:9c:e9:84:b8:53:a7:31:ad:aa:37:53:f1:bf:
                    f3:3e:9e:c8:eb:f2:ee:1c:ed:35:14:b1:3b:85:ce:
                    09:b2:d5:c7:eb:16:ff:e7:f8:a0:b2:b0:cd:73:0e:
                    49:41:ea:56:fd:01:cd:4a:2c:ee:ad:0d:b2:07:ce:
                    85:c6:4e:7b:a2:08:6c:96:76:6e:7a:df:7a:4b:93:
                    cc:c0:0d:e1:d2:28:56:ed:a6:27:65:a9:4f:cf:35:
                    16:a7:0b:bd:3a:9c:73:3e:d5:bf:fe:7d:67:6a:96:
                    70:e8:0d:1b:38:2d:cc:1c:69:06:a4:93:e6:e1:cb:
                    6b:56:ef:5d:1d:6b:4b:a9:af:3b:08:99:11:6a:0e:
                    a8:d3:10:f0:1b:0d:f4:ff:ff:d8:09:80:e0:91:19:
                    ca:3c:cc:11:72:3e:d7:a9:e8:fd:9d:12:b1:b6:b3:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:BA:EB:18:43:50:DC:EC:BB:46:FD:3B:F0:96:5E:33:41:6F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/e5abe283-61fd-3f8b-9722-85ccbed835f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl

            X509v3 Authority Key Identifier:
                keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1fe0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:75:8f:48:e0:92:c1:19:45:7f:16:1b:54:dc:89:ae:37:
         7b:d5:da:7b:fe:36:d6:b3:b5:52:6c:8b:af:82:d9:c4:2a:b3:
         1d:73:81:23:c8:3e:17:8f:1d:63:9a:23:4b:7a:c9:ce:9e:f9:
         b8:2d:67:f9:87:70:02:9b:6b:72:1b:ac:55:8c:ee:07:b1:6c:
         e8:d6:db:11:45:9c:d2:31:f6:39:82:9e:4b:6c:f1:c0:e1:f5:
         04:6f:94:8f:58:76:1b:25:ad:1e:77:ce:72:7a:a7:7d:e7:ee:
         11:94:bd:a5:6b:f7:f4:41:3f:90:e7:2d:82:cb:17:b3:82:da:
         6a:28:90:88:5f:92:df:96:e3:e1:cc:e4:68:cf:37:d6:47:6f:
         1a:85:27:94:2c:8a:b5:fb:72:07:c9:ae:5e:30:5f:4f:48:f2:
         dc:de:1e:7f:8e:70:6f:8a:d7:3f:99:90:28:f9:5d:09:c2:96:
         be:c8:07:24:a7:30:b4:e7:c1:b4:f0:d7:aa:d8:ff:f4:fa:84:
         05:f1:1b:d7:35:3a:ec:eb:fa:fd:70:f9:3c:17:8c:40:7d:fb:
         8e:3d:94:ee:d0:ac:36:0b:d3:99:b8:24:af:42:46:54:37:fd:
         a8:14:8c:f2:77:90:e3:52:14:91:a8:5a:58:a6:4e:c7:f2:f1:
         b3:01:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:48 2025 by rpki-client