Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48173e26-687a-3d23-978a-97f230b114ad.roa
File:                     48173e26-687a-3d23-978a-97f230b114ad.roa (raw, json)
Hash identifier:          0XBFEPCm/BcQwmoxaRWynobJGmGYLTmT55QqOMzulXc=
Subject key identifier:   4D:A1:AA:33:9C:6B:70:81:A8:CF:26:DD:6F:85:F5:62:BB:83:76:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3F1C6346F6DF612178F83960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48173e26-687a-3d23-978a-97f230b114ad.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:140b:a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:63:46:f6:df:61:21:78:f8:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=5193696b-d767-458a-8491-b8ab7f49ec22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:15:45:b8:fc:00:fe:60:87:0a:c8:3e:a6:
                    fe:3e:ee:bc:51:83:a7:56:08:46:ca:88:38:01:c2:
                    09:92:bb:71:03:e6:d4:fb:bc:a2:76:57:95:a2:e0:
                    bb:0a:1b:c6:de:11:2b:78:45:00:81:6c:01:8d:b7:
                    94:42:c0:01:7d:87:9d:ef:8c:86:1c:b0:6b:12:7c:
                    64:7d:4d:d7:48:12:2e:64:a7:60:97:38:86:43:7c:
                    bb:63:10:90:8a:cd:60:71:71:a8:e5:43:a2:e6:5a:
                    bb:30:4a:30:c0:a9:ff:e8:72:c0:12:7a:96:08:37:
                    ae:39:89:30:1f:31:6c:46:01:eb:36:4d:62:93:2c:
                    f9:ab:73:d4:fd:dc:ce:25:f8:13:aa:78:84:d8:d2:
                    5c:ee:27:1d:b8:d2:c3:8a:68:30:09:97:df:51:2d:
                    23:52:b8:81:ef:b6:33:71:49:db:60:bf:63:b2:f6:
                    68:3c:3b:01:23:a8:d7:b5:02:12:ee:6e:bc:f2:b2:
                    cd:c4:0b:dc:73:a8:a3:e4:5f:5f:ba:40:0b:cd:df:
                    f5:4d:bd:7c:cb:64:be:c9:d6:5d:83:aa:f5:e7:4e:
                    ba:07:4a:98:21:ee:1e:ec:15:ef:22:d5:17:58:67:
                    25:8d:b7:11:72:fc:68:e5:b7:9c:f5:0c:db:a5:10:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A1:AA:33:9C:6B:70:81:A8:CF:26:DD:6F:85:F5:62:BB:83:76:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48173e26-687a-3d23-978a-97f230b114ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:f8:93:c0:1d:51:6d:f7:0e:88:da:63:5d:0a:b4:78:02:
         42:23:70:93:f7:eb:24:58:22:4a:e3:bb:e5:ef:ee:20:93:be:
         9f:40:7a:05:da:8d:d3:9c:bf:31:3e:f9:8d:ec:d1:3e:1b:ca:
         d9:f6:a1:83:bd:e9:58:19:8f:ef:dd:3e:4b:2c:0b:66:b1:e9:
         24:e4:df:f4:00:3c:01:15:1e:32:97:50:d0:b6:bb:2e:94:5c:
         f5:2b:65:9e:76:41:64:89:01:09:e5:f6:d8:14:d2:99:bd:dc:
         97:04:c3:11:36:12:4a:2d:0e:61:79:c0:13:f1:31:9f:30:92:
         bf:30:2b:6f:09:d3:96:c0:4b:8b:61:1f:58:12:01:f4:19:c8:
         05:a8:5f:31:45:85:a4:e0:a4:52:ec:1a:8c:38:28:d0:83:63:
         e0:0d:dc:4d:bb:0f:c3:9d:30:f7:d6:78:27:d5:d7:92:fb:9a:
         10:cd:bb:cd:6d:6f:43:d6:a3:47:47:1b:07:88:17:14:f6:4b:
         74:56:df:85:a2:1c:98:73:13:f4:98:c1:36:31:3b:61:e3:b3:
         48:51:e5:ab:3a:5b:d9:02:7b:86:5d:09:80:19:01:c9:f4:2e:
         47:96:bd:6c:1d:a6:57:88:79:85:24:65:96:84:58:d1:25:74:
         db:60:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:28:24 2025 by rpki-client