Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/127d0162-4846-3fa9-be95-a4654363b0a0.roa
File:                     127d0162-4846-3fa9-be95-a4654363b0a0.roa (raw, json)
Hash identifier:          jQUdla1K9qWs+DGGDl4/hr1c2w5tXIakJAZ5dlugXsA=
Subject key identifier:   E7:4D:C3:22:6C:CA:58:81:81:A2:22:15:A3:86:49:52:E7:DE:F5:E1
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C176BE2B1001B18AE0500
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/127d0162-4846-3fa9-be95-a4654363b0a0.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        2606:a800:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:17:6b:e2:b1:00:1b:18:ae:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=876342f3-55e5-4713-955b-021b04369606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:ce:f3:8e:06:c9:08:bd:05:64:49:1a:d1:
                    29:3f:3e:c8:53:03:43:cd:8d:06:c1:23:c3:a6:1a:
                    16:dc:46:f8:b9:3b:62:72:9b:ab:ab:87:b3:95:1e:
                    86:e3:4b:b3:1c:7f:5f:a3:b3:8c:05:5e:a1:e7:80:
                    51:38:d1:a4:7e:34:20:bb:c6:ac:ac:17:18:8c:cb:
                    8a:e2:3b:31:18:97:b0:f2:88:44:6b:2b:9e:b7:10:
                    7f:2f:bc:2d:ef:06:42:2c:c4:2e:91:7d:91:fc:dd:
                    5b:0c:79:8b:bf:82:f1:03:95:9d:ce:fa:05:94:8e:
                    d1:58:96:a8:5f:c1:43:a5:b0:ba:ec:46:c4:ef:de:
                    b1:30:b0:bf:b6:1e:95:9b:12:a2:25:88:2e:54:6d:
                    e3:93:f7:4f:25:cb:7d:41:5e:63:0c:b8:51:91:91:
                    92:7d:aa:ec:87:a7:e4:68:fd:07:c8:3c:57:e6:45:
                    ef:cd:70:8c:a9:86:2e:a3:6d:3c:5d:f2:b6:74:ff:
                    57:59:57:e8:91:54:68:b1:4c:01:ec:88:a4:bc:6e:
                    b9:9e:4e:2e:1a:da:20:b9:76:4e:4f:97:0b:e5:18:
                    3c:65:b0:b5:23:72:c9:99:32:0a:c1:04:d3:54:df:
                    cb:6c:d9:7b:04:a8:51:43:e4:35:9e:45:15:72:26:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:C3:22:6C:CA:58:81:81:A2:22:15:A3:86:49:52:E7:DE:F5:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/127d0162-4846-3fa9-be95-a4654363b0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a800:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1c:e5:96:fb:34:60:a5:e2:8e:d7:b5:59:42:4d:f0:4b:be:
         58:35:ab:ea:68:e2:83:6a:a6:f9:22:e2:bf:4a:42:92:a7:a0:
         db:f1:67:50:3d:35:c5:a2:32:3e:8b:1a:37:dd:f5:3c:43:37:
         30:9c:b4:be:60:1f:6c:ef:87:90:56:4b:f2:fc:48:15:ea:62:
         7b:54:21:ff:7f:ad:31:04:d0:5b:fd:96:4c:c6:4e:65:a5:9b:
         7a:f9:9d:8e:9d:2f:ff:09:b1:ce:a7:79:e3:55:d5:3d:36:94:
         30:14:b2:cf:47:46:22:95:f5:12:c6:ab:11:cf:ac:6c:ff:6f:
         c1:95:93:a1:2b:83:03:28:48:67:c0:d3:e9:20:7a:3b:10:0f:
         5a:a2:77:e8:a6:d1:51:cc:c3:29:c8:33:9d:d1:3a:69:9b:15:
         b3:c5:6b:48:f0:f0:10:c6:bc:c1:6d:6d:ef:bf:5e:50:79:94:
         be:c8:9b:8b:29:19:1e:dd:2c:3f:f9:ae:a1:4f:0a:46:74:c3:
         44:35:11:89:f4:1d:1e:4b:63:42:e0:9c:70:d9:37:98:fa:b6:
         e2:09:41:30:61:30:bb:34:45:5c:39:74:c3:d8:05:ab:0b:42:
         9d:e2:a3:95:23:36:3a:22:98:14:89:ae:4d:55:a4:46:93:a2:
         c7:ce:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:54 2025 by rpki-client