Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa
File:                     db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa (raw, json)
Hash identifier:          wCVxO6AlFRFojY6IvrLooxpLFF5X7bC/jaXTMLw2LgE=
Subject key identifier:   86:2A:32:E8:13:8F:47:46:7D:2E:2B:91:73:9B:CC:1C:98:AF:43:9D
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B3556E80BAF813920A763FF00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     18752
IP address blocks:        2607:9700::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e8:0b:af:81:39:20:a7:63:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=3dd1602c-4218-4c96-ab55-ab6ec7800106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a9:51:70:c5:c5:2e:38:bf:84:ed:da:b2:7f:
                    b3:26:3b:07:be:d5:11:c4:42:3a:fd:1c:ea:d9:47:
                    3b:4c:32:f6:f5:b8:a0:b9:ce:0c:fb:21:ec:76:a2:
                    19:40:d2:19:12:21:18:ae:46:a8:39:e6:ef:3e:36:
                    c9:7c:e5:0a:e4:12:de:c1:f5:04:a2:f6:0f:1e:e9:
                    39:9d:7b:a0:c4:c3:16:85:c4:70:b7:45:2b:12:72:
                    8b:d9:ec:23:cb:8d:28:fc:0c:9b:2e:73:ba:fb:63:
                    5b:ba:9a:3e:2f:f0:32:aa:b7:12:91:59:61:39:8c:
                    12:3b:4d:5f:b0:88:1b:3c:98:d8:31:d6:33:ce:66:
                    83:a6:14:f6:e3:13:df:28:50:9e:8e:51:3c:f0:fb:
                    dc:8b:60:60:9d:d3:44:5b:89:4f:7d:ea:d5:7c:55:
                    14:70:8e:78:4d:2e:ca:43:3b:25:44:0a:b9:fe:59:
                    e4:d5:e6:0c:5b:fb:b0:52:d2:2c:f9:cf:15:44:ee:
                    b8:90:5c:21:69:23:d4:4c:bb:82:36:26:a0:cd:16:
                    28:c3:ae:95:5a:30:d4:d3:fb:b9:71:57:53:a1:f6:
                    fd:91:f6:d1:22:ce:e2:a4:c8:13:ce:01:b3:24:1a:
                    67:c6:4a:04:5b:be:48:8a:fc:4f:5e:e0:90:fb:a2:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2A:32:E8:13:8F:47:46:7D:2E:2B:91:73:9B:CC:1C:98:AF:43:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/db3eb550-42cd-3a2a-aec9-ade3790f93c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:af:10:7a:03:8e:92:ac:70:4b:c6:da:a2:a0:d0:43:82:
         56:2b:52:3a:47:93:e8:52:1e:38:bd:58:c5:f3:30:c1:83:f5:
         cb:95:78:99:b0:5d:d1:73:d2:44:78:b3:9f:ae:00:dc:8b:72:
         8f:9a:82:8c:d1:e4:d7:9a:2d:ac:4d:32:12:86:2d:5d:36:2d:
         5c:aa:9b:f6:02:97:2d:ec:32:b8:a8:4c:80:14:1b:dd:1b:2d:
         2d:67:ee:50:7e:4e:2a:49:a0:fc:42:fd:20:1a:a7:65:38:ea:
         c3:4a:39:79:4c:8d:68:0e:05:4e:1e:4f:b8:43:1d:e4:d1:56:
         94:c2:49:ea:95:04:50:dd:5a:9c:b5:cb:85:4a:db:7c:06:15:
         6c:4a:96:f8:76:d1:56:98:99:5c:76:0a:0b:a0:eb:d4:e9:99:
         41:dd:cd:af:5b:9b:9c:89:c4:bc:b7:16:4f:df:b7:d0:03:67:
         76:6b:9f:c7:67:83:84:4d:e0:7b:d7:fe:3c:e4:c0:cd:90:77:
         8c:d5:63:10:83:d2:6e:6b:0f:9a:f8:01:f1:dc:44:d6:5b:e3:
         6b:fc:99:0a:fb:54:c2:42:c9:6a:77:85:eb:ce:f8:b5:1f:57:
         ea:2b:2e:4f:d1:03:a2:79:68:2a:19:24:7b:d5:3a:18:e8:3d:
         e5:41:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:22:23 2025 by rpki-client