Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7d9909eb-c038-3060-80e8-fdeebe173ccb.roa
File:                     7d9909eb-c038-3060-80e8-fdeebe173ccb.roa (raw, json)
Hash identifier:          /1rMCxhqjf79E9wzOlntdLaVM/wh3l1+RbhX+7og3OA=
Subject key identifier:   4D:3C:02:8E:CC:DA:E3:49:2B:C8:8A:B9:76:F8:C4:23:F7:03:55:89
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B44B1BA2BBEE9F37C224A1220
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7d9909eb-c038-3060-80e8-fdeebe173ccb.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     174
IP address blocks:        2001:49f0:d13d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:ba:2b:be:e9:f3:7c:22:4a:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=4a1c01be-ef1a-407b-96fe-42d1beb25fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:6e:40:b1:d7:09:f5:62:98:0a:90:a9:d7:
                    b0:24:0e:1a:3d:70:cb:32:68:9e:fa:13:11:21:99:
                    14:fc:6b:03:2f:ee:c4:3b:a1:d8:00:ae:e3:a9:56:
                    f7:2a:fc:27:b1:ac:e4:db:a0:fe:b7:f8:a5:ef:a1:
                    04:f7:7c:70:0d:90:f5:17:f3:63:5c:18:58:65:ba:
                    84:40:79:02:f4:99:3e:8a:73:ba:6c:10:f9:00:0b:
                    a3:e2:d5:4f:41:b8:b0:dc:ef:07:eb:e9:fa:25:a9:
                    a3:b3:c7:5b:47:88:69:0f:fc:bb:27:f5:d1:86:13:
                    a1:fc:96:75:86:d7:c4:59:0e:71:fd:8b:d8:9f:24:
                    2e:dd:9d:ae:e5:39:3d:d7:b6:e6:02:d3:e2:32:78:
                    23:42:48:8b:2c:00:1a:f0:8d:bd:e5:2c:18:6f:95:
                    42:0e:20:35:13:cc:83:37:ab:8c:8a:4e:2e:67:0b:
                    33:4e:3d:7e:cf:43:9c:b2:52:5a:30:fb:06:67:c2:
                    98:1f:67:7c:24:94:0f:a8:87:8f:27:ba:d2:ab:ae:
                    6f:e4:33:e2:0f:83:de:53:04:9b:65:3c:86:41:9b:
                    f2:38:ab:a7:25:31:32:2a:42:6e:91:7c:19:11:dc:
                    b0:b6:89:0f:d5:04:7d:6b:94:27:4d:6c:54:a2:10:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:02:8E:CC:DA:E3:49:2B:C8:8A:B9:76:F8:C4:23:F7:03:55:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/7d9909eb-c038-3060-80e8-fdeebe173ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d13d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:56:0a:55:79:81:7f:97:96:85:e0:93:a2:ec:d5:e9:9d:
         8d:55:ba:5b:c1:64:ae:19:8f:56:95:66:87:ea:d2:50:3a:7c:
         f7:d0:df:42:74:3e:d5:35:a8:5a:a7:37:5b:1a:c4:27:9c:17:
         55:2b:1e:e1:77:14:be:3a:1b:db:6c:e2:e1:08:e7:6a:4f:0f:
         6e:9a:b1:1e:12:5f:39:5a:f1:9b:6f:43:4f:31:29:55:fc:06:
         74:80:90:86:3e:20:2a:50:ed:55:35:37:08:64:ad:53:ea:d5:
         25:2f:14:b3:8c:9a:aa:f1:1e:22:6d:98:a4:92:3e:08:89:a4:
         61:c9:41:60:25:38:15:ac:bc:8b:60:19:ff:cb:27:5f:68:9a:
         4b:8f:a7:c5:d9:2b:0f:e5:99:c7:4a:68:6b:af:db:70:73:4c:
         0b:cb:94:4d:3a:d4:ee:09:d6:2d:58:18:78:33:c5:1e:68:0e:
         9a:42:2e:80:45:66:5d:34:dd:2e:e2:54:c6:75:85:89:d0:df:
         44:18:d4:f8:0d:78:a9:2c:b8:53:c9:2d:a7:c1:1d:95:ef:4a:
         84:aa:8b:e2:ca:93:82:a9:b6:2e:cb:0a:92:bf:d9:f6:eb:74:
         61:31:9c:b7:b2:db:b6:12:7a:fc:9a:00:0a:b7:91:e2:69:3f:
         7f:ba:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:21 2025 by rpki-client