Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
File:                     52ea9329-199b-3173-bb35-8fdad2b9a372.roa (raw, json)
Hash identifier:          Iqs4YsxMWTA6gtqgqch8EuGqvx1oOrx6V+Yg9phimCs=
Subject key identifier:   6C:E4:75:92:B1:C7:8D:DE:46:3A:B5:9C:D0:FF:A2:01:AD:2E:C5:41
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584B78574D4E8312B04E004F4680
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     5744
IP address blocks:        2610:20:5160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4d:4e:83:12:b0:4e:00:4f:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=461ea3a1-3888-4085-b0b9-b9385227dbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a2:c4:b1:5d:ae:da:15:10:20:c5:f6:c3:33:
                    4b:8d:cc:f5:7c:15:13:58:cc:f8:0a:60:55:41:50:
                    93:2e:84:f9:78:14:cb:d3:aa:2b:d4:25:5f:06:7b:
                    45:55:e7:04:c6:7f:fe:30:73:21:eb:0f:5e:44:e1:
                    11:fc:a0:b4:c1:6f:8b:fa:55:55:7e:3e:de:22:78:
                    90:6c:37:d5:ff:a4:d9:3a:55:3b:c8:cc:f2:82:10:
                    9e:e5:45:95:b3:1c:6c:c7:9c:4e:a5:15:00:a3:e2:
                    03:fe:ef:3a:5f:e9:b6:87:05:f5:a8:78:84:3b:90:
                    21:f7:66:db:96:24:3f:2a:9b:a0:2c:0b:fd:8f:14:
                    f3:0b:3f:72:2a:fc:5c:66:2e:38:e1:10:1b:5b:98:
                    1e:8f:05:b2:ef:f6:3c:db:9f:fb:aa:3a:36:78:56:
                    50:4b:c1:2e:82:f0:f4:3c:d8:74:48:37:47:85:d3:
                    2d:1e:2b:bc:9a:25:da:b1:4f:8f:e9:d3:28:6e:85:
                    bd:09:df:34:0e:aa:16:30:7f:7f:ce:2e:7a:ae:07:
                    d0:62:3f:cb:44:db:5e:82:ab:49:6b:e8:6c:f1:85:
                    19:89:82:4d:56:b4:ce:30:23:47:61:9d:01:e9:2e:
                    29:3b:cd:11:0b:40:01:e2:8f:98:59:eb:0f:aa:91:
                    69:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:75:92:B1:C7:8D:DE:46:3A:B5:9C:D0:FF:A2:01:AD:2E:C5:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d8:48:cc:09:05:89:7d:4a:c2:75:6e:06:d6:bb:58:aa:19:
         21:41:58:12:b9:46:23:98:8e:38:28:4a:f6:07:ed:ec:85:d7:
         87:94:95:7f:86:b6:28:36:55:2f:86:ef:1a:e1:ea:df:06:b8:
         d7:28:38:36:55:5f:37:39:65:89:34:43:a0:a7:88:50:45:1b:
         d7:73:a2:c5:d7:32:78:4a:64:c0:f2:26:f7:62:b1:19:02:54:
         11:e0:88:a5:e8:ff:85:17:9d:22:81:fc:e4:0e:0b:0a:ae:bb:
         73:a4:ad:81:ef:83:b6:f1:7a:56:f0:91:ab:71:a9:ad:30:7f:
         ca:0e:71:bd:8c:03:9d:db:7b:02:98:93:f7:76:27:64:80:56:
         84:cb:31:32:40:cb:21:70:8a:80:29:9b:aa:1e:96:c9:50:33:
         89:20:76:a2:89:80:36:49:7c:da:98:4a:d3:ae:4f:f8:81:90:
         d0:00:2b:3c:ff:52:b4:9a:db:4c:a8:17:0f:64:50:44:44:1b:
         15:0e:b3:91:e2:fa:3d:c1:45:fa:a3:c6:c7:c9:76:a1:03:28:
         05:dd:45:7e:15:e9:d1:27:a5:3d:42:a6:bc:b6:c5:c3:fe:f9:
         df:58:59:74:c9:31:c7:7c:4f:f7:e6:b9:a8:4c:ab:35:74:56:
         3f:f4:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:34:22 2025 by rpki-client