Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
File:                     17556c0a-f699-393f-934b-8c8b0db969e9.roa (raw, json)
Hash identifier:          p/lBGZ2eOPWKVgJp6GM/JgChDdYrs1NKRL8PVd5tTcc=
Subject key identifier:   D0:35:3D:57:75:2C:64:3B:2A:8A:6C:6A:D9:E0:9A:2C:A0:4F:65:9B
Certificate issuer:       /CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
Certificate serial:       010D0C9F4328584B7B21F6AC02B1386431D38740
Authority key identifier: E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     18683
IP address blocks:        2604:b680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f6:ac:02:b1:38:64:31:d3:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=51e2d61a-e8dd-4b30-87b6-1198c943b97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:7e:5f:21:4a:b2:04:59:99:69:6e:58:42:
                    7e:db:e2:d4:28:df:60:75:28:6d:96:64:3e:c8:4a:
                    b2:51:42:aa:97:d1:21:bb:e9:2a:64:fa:65:2b:91:
                    ef:30:6c:da:07:52:ab:95:8b:33:8a:44:0a:0e:5f:
                    f5:86:b4:01:48:6f:fb:41:18:90:3c:4e:10:99:09:
                    b6:ef:da:db:bc:39:b2:dd:8d:38:03:1b:5c:e7:48:
                    7a:f8:d3:15:e4:f1:69:e5:46:c9:84:b6:c2:39:66:
                    a9:02:42:07:9e:37:01:29:6d:ba:17:61:c4:67:09:
                    17:6c:1f:42:1f:e3:ed:07:5a:a5:25:60:57:d3:4a:
                    38:99:f8:0a:3b:56:4c:e7:77:6a:7c:db:cf:b7:82:
                    1f:5c:af:dc:b3:15:dd:03:ab:d8:f2:2d:47:79:70:
                    95:c3:ad:2c:6c:00:56:85:23:9f:28:0d:3f:e9:32:
                    1e:03:1f:17:a0:f7:91:e0:ae:c2:a6:03:23:6a:6c:
                    e7:db:76:be:d2:46:b3:af:5f:d5:59:92:77:86:bf:
                    36:3e:ab:0e:45:ce:29:a0:43:4a:cf:5a:7a:dc:ff:
                    02:02:6e:3a:1e:0a:51:2d:64:2d:c5:b2:67:dd:33:
                    cf:19:21:d9:d6:ad:29:88:90:22:14:6b:82:e7:d0:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:35:3D:57:75:2C:64:3B:2A:8A:6C:6A:D9:E0:9A:2C:A0:4F:65:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7f:b0:3f:4b:88:78:6a:f2:c2:0a:1d:c3:1d:2c:65:0a:e0:
         80:d0:37:e9:a8:d6:ea:62:74:1f:ed:4f:6d:ec:90:fc:52:03:
         6d:a2:54:c4:bc:85:76:f0:da:a1:75:76:a6:e6:85:75:71:30:
         c1:8d:27:fb:11:06:20:19:11:86:e0:78:ab:42:a4:b0:5d:f0:
         07:60:2e:90:4e:41:78:2e:a8:79:f6:91:03:df:ee:58:d3:57:
         c2:fa:d9:97:ec:c1:36:d0:d3:c9:31:65:e8:98:4f:c0:78:5b:
         6f:90:5e:b8:c3:2e:85:a8:e9:eb:61:bc:d9:17:cd:30:dd:c1:
         20:a3:75:6b:dc:8e:7c:83:a4:80:2d:ab:91:66:9c:ad:01:a7:
         b9:46:db:dd:d7:2a:51:49:6f:8a:0e:ce:5b:36:b7:40:a5:28:
         e0:b7:dd:62:b3:d0:9a:e7:b0:ef:f5:74:92:4a:14:d0:86:c6:
         dd:cf:b7:26:1d:df:5c:ab:0b:cc:bc:83:d0:da:9a:40:c8:d0:
         06:06:0f:3e:4f:7f:ca:0e:b7:40:b2:20:73:f0:15:f6:a7:e2:
         35:d2:7e:ca:cf:00:de:fe:d8:47:84:8c:e2:99:42:f7:c0:fa:
         47:84:2d:92:b5:86:65:0a:b0:cc:8e:2d:6a:50:7f:1d:a7:37:
         cc:7a:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:22 2025 by rpki-client