Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa
File:                     2329de53-b409-3291-990b-01313cf69c68.roa (raw, json)
Hash identifier:          qj19bdX/Pt/wI6hXr/CvXAyzFQJ4tXJ/NR/PMZLWE8A=
Subject key identifier:   AB:F9:BF:8E:B2:49:04:46:C1:72:34:E4:8A:FB:FD:BB:66:18:27:47
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584B8BE220773DC7D5FF8891E500
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     33309
IP address blocks:        2620:106:8000::/44 maxlen: 44
                          2620:106:8000::/48 maxlen: 48
                          2620:106:8001::/48 maxlen: 48
                          2620:106:8002::/48 maxlen: 48
                          2620:106:8003::/48 maxlen: 48
                          2620:106:8004::/48 maxlen: 48
                          2620:106:8005::/48 maxlen: 48
                          2620:106:8006::/48 maxlen: 48
                          2620:106:8007::/48 maxlen: 48
                          2620:106:8008::/48 maxlen: 48
                          2620:106:8009::/48 maxlen: 48
                          2620:106:800a::/48 maxlen: 48
                          2620:106:800b::/48 maxlen: 48
                          2620:106:800c::/48 maxlen: 48
                          2620:106:800d::/48 maxlen: 48
                          2620:106:800e::/48 maxlen: 48
                          2620:106:800f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:20:77:3d:c7:d5:ff:88:91:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=929b6a7d-4b4d-4cb0-90a9-d69cf9463646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:bd:77:e9:2c:f3:16:36:5c:2a:43:3e:e7:
                    f2:98:c4:41:58:74:48:e7:ab:54:16:69:92:09:6d:
                    03:67:d7:c6:7a:08:bc:0b:25:8c:b5:d3:29:8e:22:
                    26:0f:a9:93:b8:d9:55:22:32:94:50:0b:1f:47:a2:
                    a8:9c:dc:89:a6:a9:6a:ba:ee:53:3e:24:5f:19:04:
                    e8:27:75:97:22:6d:28:a2:64:ae:51:cd:fe:19:06:
                    31:89:57:e8:7c:28:34:c8:3b:cb:8e:37:b0:69:58:
                    71:d8:d0:06:59:94:6e:97:18:41:0f:d4:da:94:3e:
                    6c:fd:c1:31:16:3e:68:cf:ed:95:9e:f2:fe:c6:59:
                    8b:cb:4c:46:52:9e:b7:77:e1:fd:a6:08:a2:bb:64:
                    82:07:c0:3d:04:b8:b2:71:79:b0:96:b9:8d:a0:b4:
                    c7:fe:f8:92:7c:2f:c6:30:d8:c5:95:7f:e0:e9:14:
                    ed:05:b9:44:59:fd:42:05:a8:8c:76:8c:c4:94:2f:
                    af:8b:28:83:56:07:27:b2:77:28:e1:e3:fa:71:b0:
                    71:a6:d7:ef:12:f3:bb:10:1f:f7:02:65:2b:e2:0f:
                    0a:05:62:90:4d:87:8f:35:ce:99:95:26:89:af:b0:
                    0f:bc:b3:d6:67:94:79:a8:a2:0c:73:ca:68:51:ad:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F9:BF:8E:B2:49:04:46:C1:72:34:E4:8A:FB:FD:BB:66:18:27:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:4f:58:36:01:0f:9c:20:f7:35:33:9d:1e:bd:25:52:a8:6c:
         f0:35:fe:ed:39:1e:0f:73:1b:49:aa:c5:95:5d:af:a5:7e:c7:
         e2:5d:a0:23:c6:25:50:00:0e:fa:fb:16:b7:e1:da:75:b9:60:
         f1:5e:a9:f1:c2:a9:04:f2:27:da:4f:8e:81:9a:e2:80:7a:93:
         94:45:f1:da:2e:b4:b4:7c:56:56:c6:7b:a7:13:8e:f8:a5:77:
         49:ad:ac:47:5f:f6:dd:bd:89:95:32:47:8d:52:e1:cd:26:cb:
         dd:83:e7:ca:74:5d:dc:91:4d:a9:9b:fb:5f:02:96:9d:27:4e:
         ca:41:38:d7:5d:57:de:9f:1d:58:c2:b9:6e:7c:df:6d:ae:09:
         8f:e0:aa:b2:76:5a:cd:01:af:d4:94:f0:4e:42:d5:d8:a6:6d:
         ad:f7:9e:3a:9d:e6:c0:dd:05:1c:5b:b9:12:d9:08:8e:e6:d6:
         bd:92:e0:9d:db:2c:b0:65:c9:fc:97:98:c4:78:3b:60:99:08:
         9d:3b:97:de:c7:ba:5c:46:d9:39:e7:53:03:f3:37:ac:c2:7f:
         c9:1a:1b:a9:6b:9d:b8:f2:dd:91:f0:14:26:8e:c1:aa:c4:3f:
         e5:b6:4a:8a:6d:7b:7e:16:96:b8:34:e5:69:bd:ef:45:da:1b:
         c9:47:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:29 2025 by rpki-client