Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
File:                     4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json)
Hash identifier:          iPqsGctZxIvgnBjVYH/tf48JCKmUJnI97W2TIWQgfSI=
Subject key identifier:   99:6C:76:B3:87:15:65:D8:45:CC:7B:41:7F:31:D5:AB:E8:18:BD:4B
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584B758C901BB0D0C5614587FB00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     399045
IP address blocks:        2606:d640:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:90:1b:b0:d0:c5:61:45:87:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=750b669d-546d-4ccd-a0cf-4c26c01872d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:84:4e:4c:fc:82:b4:72:ca:76:b0:1d:e7:
                    e5:b3:36:06:7f:f7:26:22:20:6b:5e:56:0e:62:d1:
                    36:f7:f4:43:1a:05:db:67:06:1c:cd:4a:b6:7b:c6:
                    82:4d:f6:c1:c4:47:69:2c:f3:30:f1:18:16:ba:83:
                    b6:d0:c6:61:7a:fe:3d:6f:36:de:70:8a:b7:e1:1c:
                    3b:04:81:03:c1:3e:bc:d7:99:57:dd:45:53:e7:d9:
                    10:1a:a5:d0:56:b4:76:e5:d2:9a:68:ba:c5:95:77:
                    2b:98:a6:69:4f:d8:82:64:76:e5:b3:55:82:28:f0:
                    a6:4f:79:d1:d7:dc:c5:b7:a5:c2:2e:48:c3:f4:8e:
                    c5:5a:58:49:a2:e4:de:9f:62:d0:17:7e:1b:ed:7a:
                    bb:7f:d8:a5:5d:4f:24:c5:a5:ce:38:fb:1e:e9:02:
                    26:c5:ec:12:f5:0b:6e:3c:52:de:b9:64:95:12:4c:
                    40:6d:54:92:1d:95:9d:e3:e0:cb:99:4d:01:d5:f6:
                    b7:74:c8:9b:a5:80:e4:63:43:83:dc:83:78:cd:89:
                    95:38:69:03:6d:69:1e:f5:37:be:87:04:8d:b4:b6:
                    12:e8:ac:14:1e:1c:72:fd:ff:f7:94:f2:fa:28:46:
                    2a:58:e8:df:9f:b5:eb:84:ce:43:e9:38:a7:2c:a9:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6C:76:B3:87:15:65:D8:45:CC:7B:41:7F:31:D5:AB:E8:18:BD:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:fb:bd:8b:ee:ef:9f:2f:2e:7a:75:4d:3e:3c:3e:1f:d8:74:
         41:08:c4:bc:01:02:5c:84:10:d7:51:93:85:97:b0:01:42:f2:
         34:9a:3e:3c:66:70:b6:91:a2:49:55:1e:28:3d:e3:41:cc:dc:
         18:32:a5:ea:52:dc:d3:6e:47:88:1f:b1:a5:f4:ae:65:eb:d4:
         67:81:43:69:4f:01:e3:66:92:cb:78:07:5b:a1:60:55:4a:de:
         9d:21:2d:e3:e7:1c:7d:04:0c:39:92:61:3a:bd:07:1a:83:3a:
         3d:f8:de:ac:2c:c3:1a:77:c9:84:15:ce:d9:33:56:b6:a6:ab:
         a0:72:9c:18:1a:0c:26:99:11:84:cb:c3:06:16:b2:cb:81:a9:
         2b:4e:1b:d3:91:e7:b4:80:f0:90:0f:ce:f0:f8:ea:9b:55:7a:
         3f:08:b6:e2:a0:de:d5:f7:6e:31:33:b0:a0:51:51:5e:d8:a2:
         31:6d:d4:18:17:75:4f:37:58:4c:29:e8:59:bf:29:e1:ed:e0:
         94:cc:9b:9f:49:58:3a:9e:89:9f:36:28:1d:92:da:ba:2c:01:
         62:b5:71:4a:43:5c:e9:78:4b:43:4b:bd:1f:7a:e0:29:21:ea:
         c0:f3:d3:64:b3:11:5f:8a:86:f2:28:de:1a:39:43:a3:ae:8e:
         3a:3d:1c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:43 2025 by rpki-client