Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
File:                     4d505fff-f719-381b-b822-2695a2e94aeb.roa (raw, json)
Hash identifier:          4Q48pJCFYgJrbxXVV6e5iI9lRMeXhSYp1JJOU6MSkaU=
Subject key identifier:   36:9A:7E:D4:C4:76:45:EC:F1:7E:54:2C:E9:5C:20:74:D0:E0:86:82
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584B4D11D84074538D22E7D0C300
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     400196
IP address blocks:        2607:8240:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d8:40:74:53:8d:22:e7:d0:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=5b7c51a4-91a6-4684-aa55-0abd676ca17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:c3:49:25:83:3c:ba:c3:53:48:39:68:b4:
                    69:7e:cf:b0:26:9a:10:2d:e6:d1:ea:68:79:e8:2e:
                    fe:10:ab:cc:75:07:20:5c:7b:97:3b:58:8f:c5:c6:
                    86:04:b8:b9:4c:fb:1d:c0:38:04:28:64:a8:94:09:
                    65:d6:fe:41:d7:3d:cc:a6:b4:f0:6c:3a:f3:18:5f:
                    9d:13:42:20:86:da:ba:58:52:70:d4:1b:96:10:9b:
                    96:af:ba:7e:bc:67:fb:5c:e9:01:e4:69:15:50:78:
                    d6:92:33:ef:59:b4:10:e7:1a:d8:6e:0f:11:ba:c5:
                    e2:d5:71:c3:d8:e0:ab:b8:d3:f2:38:1d:b7:38:ed:
                    38:1a:0e:73:d0:c4:4d:ae:05:24:44:66:db:ed:5d:
                    e3:87:7b:b6:9c:89:1b:b1:a5:27:36:0d:69:7c:ad:
                    91:81:88:94:66:89:3b:b5:e9:29:42:c7:9a:ef:08:
                    46:5b:8e:78:b1:81:3a:bf:66:b0:aa:f0:85:19:78:
                    d1:0a:7b:fa:0c:03:b0:23:a2:65:3a:2e:70:80:d6:
                    5d:57:5d:34:35:49:44:7e:dc:ee:34:26:a9:7e:4e:
                    2a:0d:6f:9c:e7:ed:24:d8:32:6b:eb:c1:af:d1:0a:
                    e4:6b:87:c9:9c:82:ea:9a:d1:74:e5:dd:e1:47:b4:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:7E:D4:C4:76:45:EC:F1:7E:54:2C:E9:5C:20:74:D0:E0:86:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:be:0b:e1:f3:cd:ca:b3:3b:47:5f:e3:07:79:26:db:d2:ff:
         da:18:d1:03:8a:e8:07:a6:43:c8:fd:f6:22:bd:72:2f:d8:10:
         2a:63:cc:80:b0:42:d2:ae:cf:31:57:4b:91:34:76:63:a5:76:
         20:bd:fe:80:30:aa:6b:c7:85:ad:ee:05:da:31:3a:23:3d:2d:
         73:11:bc:da:75:6d:08:88:90:4a:95:41:3e:d9:58:e4:28:7d:
         32:50:a0:d7:35:44:d2:ba:b4:66:9b:4b:74:b4:04:e6:7d:e1:
         25:02:e4:b6:70:5c:0d:54:23:de:c5:4b:e0:5d:4f:68:41:98:
         f8:dc:80:66:e0:b6:77:1a:59:14:25:af:67:06:e8:b4:bc:bb:
         a7:71:bf:59:dd:ba:c7:3b:b1:9e:27:97:b2:a9:43:eb:1e:f9:
         1a:af:3a:52:f2:23:93:ad:41:0a:a0:59:c6:c2:05:ec:bd:0a:
         d2:14:85:ba:37:8f:30:02:f6:76:d8:a8:d2:0b:9b:18:94:b8:
         34:77:05:a3:1e:70:c9:7d:28:d9:d2:07:70:6d:d5:5b:e8:4c:
         8d:8d:e1:4d:75:74:06:50:e1:dc:8b:d0:cf:1a:e2:8c:46:56:
         7c:53:01:e2:c2:1f:13:22:29:5a:16:85:d2:63:29:78:04:9e:
         42:33:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:58:47 2025 by rpki-client