Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa
File:                     7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa (raw, json)
Hash identifier:          vYWaQfjtnuUpWnvmxvN/puUA8qPL8fb4kcPI98YSRWA=
Subject key identifier:   3A:95:AC:0C:A4:B9:B9:D4:EE:8A:D4:4F:3E:17:BD:68:E9:27:F5:F3
Certificate issuer:       /CN=18063090-3337-4bcb-93cd-f57cb925fd54
Certificate serial:       010D0C9F4328584B1F016D07FDBB64343E6EE480
Authority key identifier: C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     4901
IP address blocks:        2620:118:5000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6d:07:fd:bb:64:34:3e:6e:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18063090-3337-4bcb-93cd-f57cb925fd54
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=b601c8f0-0d10-4347-87a3-72a70078be50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:c2:53:3b:1f:bd:90:9d:c0:ea:65:fa:b4:
                    3c:f4:af:1a:38:6c:59:1e:a6:21:0c:89:17:5b:7b:
                    48:d1:17:df:87:6e:7c:fa:f1:a1:a1:91:c8:13:07:
                    77:b6:8d:3a:5f:0f:4b:61:2f:cf:fb:58:75:73:c3:
                    22:c4:ce:a4:e0:43:8d:53:b0:81:87:69:28:89:08:
                    be:da:d8:c5:0d:d9:5b:f7:e3:75:14:fc:bd:9d:57:
                    27:b0:05:47:f6:6b:4d:a1:d0:37:ba:2f:f7:41:e6:
                    fd:4f:6e:de:d9:41:c5:5b:fa:9c:13:b3:94:56:c7:
                    e1:65:71:37:92:6f:ca:5c:54:68:5b:6f:ae:41:77:
                    40:f6:fa:99:de:cf:6f:34:4f:a3:3f:80:ed:e0:2c:
                    93:ab:c2:78:33:84:24:47:2c:37:61:33:c9:7d:49:
                    cc:33:6a:10:fe:ee:06:42:9c:c5:9b:6d:47:85:3d:
                    29:22:ca:74:37:64:f1:a3:ae:8c:f3:e1:ea:c7:34:
                    bf:31:0d:46:4e:3d:48:c8:45:f7:05:a5:a8:e9:9d:
                    5b:7e:8c:1c:0b:73:50:2a:1f:2f:da:7b:18:c0:b4:
                    1c:38:17:f0:3a:df:05:79:95:a3:85:1a:98:3c:cb:
                    17:56:64:8a:e4:32:bb:75:40:cd:74:35:92:0e:be:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:AC:0C:A4:B9:B9:D4:EE:8A:D4:4F:3E:17:BD:68:E9:27:F5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/7e3f84ec-6d39-35b5-bd4c-c08e8e397dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54/18063090-3337-4bcb-93cd-f57cb925fd54.crl

            X509v3 Authority Key Identifier:
                keyid:C0:92:32:6D:39:D8:E5:C5:FA:7B:27:CD:28:20:A9:1F:B3:C4:CA:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/18063090-3337-4bcb-93cd-f57cb925fd54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:118:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:68:94:cf:dd:84:15:b5:c5:70:c0:e4:44:01:92:23:db:
         0c:a1:bc:3b:b9:f0:77:1c:e9:af:19:30:0e:8f:c4:3e:6f:98:
         0d:6f:6e:8f:4c:01:9e:35:04:45:e8:6c:bf:00:94:f1:d1:0b:
         74:1c:c7:31:77:b7:8c:16:48:83:76:ea:ac:ca:6a:15:31:97:
         fd:51:9a:07:98:23:7c:5d:93:47:3c:12:b4:30:05:9f:7e:e5:
         57:33:a4:a7:f0:ed:64:76:ae:62:53:34:2e:37:de:e6:ee:f6:
         63:1e:4b:14:ac:1d:d6:53:5e:3b:04:aa:d9:f4:6a:65:f3:36:
         bc:8b:5b:b6:6b:26:9b:3f:5b:86:22:47:3f:29:05:75:12:b8:
         ce:49:d4:7b:49:2a:68:9c:a7:0b:5f:24:a6:84:51:06:04:ff:
         6d:45:4b:86:db:9d:74:5b:3c:a7:c5:df:9f:a8:d1:91:f5:e3:
         83:b1:bd:36:57:d6:5e:1c:ea:24:85:ea:27:ba:aa:95:fa:98:
         48:88:94:9e:42:6b:88:43:b2:f1:8b:8d:93:ac:6c:ae:ae:3a:
         24:9f:34:39:22:94:d2:3b:97:b4:0e:d7:5f:dd:07:2e:9f:70:
         70:92:a1:48:f0:6e:79:00:97:38:bd:58:d9:38:f3:4d:7c:7c:
         91:31:bb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:35 2025 by rpki-client