Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
File:                     4c18c32c-4fa7-379d-9727-30aca7836cff.roa (raw, json)
Hash identifier:          VXfVffoAs7wAe3EddGUmnJ/AH/OYegjarg/4OrWshBM=
Subject key identifier:   C5:0A:C9:5F:85:19:BA:D1:65:AC:27:7E:76:79:87:7C:64:B9:95:12
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF5212A6008094186CF455EE0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     395831
IP address blocks:        2606:7bc0:1061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2a:60:08:09:41:86:cf:45:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=95bd3ae0-9784-4251-8ac9-72f0ff604962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:12:eb:38:75:b6:30:71:48:c8:c8:df:11:
                    6c:d3:26:46:2c:27:e7:98:3d:05:3d:0a:7c:da:10:
                    87:d6:74:d5:dd:b9:24:c4:f7:ca:3c:be:ab:50:75:
                    45:b6:c0:3f:a3:34:68:81:aa:87:06:18:74:08:37:
                    6b:6d:54:36:52:fc:1f:56:b1:07:16:81:7d:02:8d:
                    1c:10:ce:e3:0e:0d:a2:28:40:8c:09:35:d8:77:ad:
                    ee:70:c0:9a:cd:f9:07:a0:aa:97:05:24:a6:7c:e0:
                    0b:33:6d:43:41:df:e6:bf:8d:66:37:92:3e:65:7e:
                    30:66:51:27:6f:ec:7c:50:10:7a:6a:b3:c7:d0:a4:
                    ec:5f:8b:6f:37:31:e7:6e:ab:86:51:a3:5f:4a:47:
                    07:30:19:60:47:ee:84:a8:70:cf:bd:8c:de:85:52:
                    0e:4a:bf:35:c2:e2:0f:00:46:24:d6:40:ea:2c:9b:
                    a0:d4:fd:84:83:1b:f1:7d:cf:06:58:57:5d:2a:31:
                    78:bd:4d:00:26:c8:28:d9:68:6c:be:24:4f:bf:d9:
                    8f:14:67:4b:9d:3a:74:49:e1:0a:00:cf:dd:14:b2:
                    a1:7f:1f:3f:15:bc:50:53:cd:0d:18:10:aa:44:c1:
                    06:73:81:62:86:0f:84:b0:7b:d5:11:c8:d9:17:bd:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:C9:5F:85:19:BA:D1:65:AC:27:7E:76:79:87:7C:64:B9:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4c18c32c-4fa7-379d-9727-30aca7836cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1061::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:05:28:11:4e:f2:73:a9:2b:5e:e1:3d:77:a4:d4:0d:a3:
         e9:3b:e6:0a:f7:6a:a9:e1:47:75:75:7d:d8:30:8b:77:4b:a4:
         73:4c:29:26:0b:e6:04:4a:1b:37:14:9b:c7:d1:f1:0d:21:5e:
         48:ae:3e:27:7e:5b:4e:ae:e8:f9:4e:3d:9e:7c:67:b5:74:31:
         4f:e2:c1:61:06:25:52:07:3b:bf:30:d2:24:28:2e:7e:44:ec:
         d0:d7:71:90:bc:a2:30:ed:ab:5a:9f:8c:2d:95:08:d0:84:67:
         6d:af:e2:c6:6e:56:97:fc:62:46:a2:92:ed:26:38:55:e7:c3:
         73:64:ae:b5:5a:87:73:73:24:00:ac:91:cb:e1:71:08:8a:1e:
         39:51:d1:4d:f0:52:9c:17:6e:a6:18:41:c5:d2:af:e4:c0:71:
         ef:19:6c:d8:a6:4c:8e:72:22:64:92:bf:73:51:23:11:f2:ae:
         6d:ce:be:6c:ed:93:a4:b4:c8:3a:bf:e4:1d:94:39:5d:25:66:
         68:11:6a:dc:a7:8d:32:1f:5d:f0:f0:5e:8e:5a:4f:b4:63:b0:
         f2:3f:51:aa:43:c0:7a:34:10:1a:ce:99:1e:60:62:e5:95:ce:
         90:d0:22:ba:10:9a:85:41:35:2c:06:2b:91:f5:36:3b:23:b0:
         f8:d4:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:59 2025 by rpki-client