Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa
File:                     422c4c6c-86c9-3e50-b42b-db3e335b7048.roa (raw, json)
Hash identifier:          qhUI0lt1CPMArQbarlKjFTiLTWrbQNtMH1mVrNOoSi4=
Subject key identifier:   02:64:99:0F:14:07:B1:B7:D2:9C:0C:D2:86:6C:BA:5E:44:21:86:93
Certificate issuer:       /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
Certificate serial:       010D0C9F4328584B328C5D63B4A72761C7A52280
Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2606:6ac0:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5d:63:b4:a7:27:61:c7:a5:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=c9abeb56-42a8-4ee4-a41b-e207e8b31948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:58:f5:63:2d:e5:97:8f:ce:1c:c3:cb:d8:
                    8d:34:2f:ad:76:25:ac:ec:c5:06:eb:51:2a:8b:5a:
                    6c:eb:0d:a5:9a:6d:ba:cd:d1:77:ce:a2:b2:6b:6e:
                    65:e3:21:8a:6f:0b:e1:8a:14:ff:bf:0d:ac:f2:ca:
                    b0:87:4e:da:a8:5f:b7:90:82:d3:db:be:4b:f8:cf:
                    c3:79:b2:3f:75:d0:f1:0f:e2:6b:ed:dd:44:0d:eb:
                    75:c7:71:9f:9c:3a:2a:70:f8:c5:5f:84:13:f2:cd:
                    20:5e:2a:30:f5:01:9a:df:8e:c6:88:21:bd:24:62:
                    67:7f:61:50:b5:a8:90:82:ab:c9:e7:9d:88:7b:e1:
                    1c:f4:2e:5e:2d:94:95:7b:a5:08:6d:5c:79:59:aa:
                    18:31:42:fe:c2:cc:32:40:a6:e5:42:25:79:c5:f2:
                    21:0b:49:96:e3:34:cc:f3:87:93:3c:3e:d6:f1:b9:
                    f7:66:22:aa:8b:ee:7e:49:ef:de:98:63:2b:5e:3a:
                    ea:c9:77:b5:ca:d0:a3:90:5e:62:ee:21:93:96:c3:
                    41:49:e1:63:59:de:36:4f:ce:8e:cb:b0:53:eb:32:
                    da:89:61:9e:5c:06:f8:31:df:dc:4d:87:c5:33:3a:
                    ea:b8:0c:43:87:64:83:fa:d5:11:b5:ca:e6:e9:4b:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:99:0F:14:07:B1:B7:D2:9C:0C:D2:86:6C:BA:5E:44:21:86:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/422c4c6c-86c9-3e50-b42b-db3e335b7048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ac0:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:fb:6d:fc:cf:95:b5:9f:a1:ab:fb:28:eb:d0:22:89:f9:
         45:d9:89:16:dd:03:98:0d:f2:3b:07:d9:c4:27:fb:07:d3:e3:
         31:fb:9c:72:86:01:72:8a:9f:1e:48:8e:be:26:49:ea:93:0f:
         53:24:28:01:be:7c:d0:f1:55:53:b2:dd:dc:aa:ea:3b:fa:a1:
         0e:8d:9c:b0:49:32:b0:01:61:ae:b4:6c:5c:db:1a:82:a7:d4:
         35:76:2e:96:ab:6a:f7:71:7a:17:73:57:aa:5b:90:44:f4:82:
         a5:62:28:19:c9:ed:56:89:4e:7f:79:b2:2a:76:5c:98:82:ee:
         02:28:cb:8c:c4:64:b8:87:66:ce:cb:10:9f:90:b6:4f:e1:af:
         38:e7:80:12:ed:44:de:dd:f9:c0:f6:8d:28:41:7b:3c:58:26:
         56:d4:c2:c1:b7:4c:9a:65:b5:ed:c3:7e:7d:83:da:4b:f7:ad:
         58:35:19:ed:27:07:a8:63:e8:3c:65:43:21:bb:ab:f9:21:83:
         a8:97:70:8e:18:26:03:3c:7a:61:15:43:8e:54:48:4c:6f:ee:
         b4:b2:88:cc:04:14:fc:42:65:cd:fc:54:84:6a:28:cc:77:78:
         78:5e:83:5b:84:21:00:2c:f7:26:d7:2d:47:fe:bc:fb:31:83:
         f9:37:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:25 2025 by rpki-client