Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa
File:                     f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa (raw, json)
Hash identifier:          QHGnk6Z9z3ILfGwdsx8yKLffp+sv4VHx9MUQzDaw8DM=
Subject key identifier:   72:97:65:BE:94:AF:34:E7:51:2C:69:28:0B:08:B9:3D:A1:FB:75:CD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD7491950A261896524740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        2001:4860:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:74:91:95:0a:26:18:96:52:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=146e6d25-5470-42ba-b6a9-9ad1486418ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:96:37:3e:22:03:82:7b:02:08:e2:2f:b3:
                    1e:e0:ca:b1:43:1e:b5:8a:19:27:16:b6:51:92:b7:
                    c4:bd:e9:be:39:c3:2d:08:e9:dd:5b:c4:e4:1f:67:
                    74:30:71:11:b9:ae:09:63:53:4c:c2:65:d7:fb:91:
                    b0:d6:50:68:07:6d:ac:52:3f:0d:6f:81:cc:ca:3a:
                    84:40:46:95:9e:2f:8b:bb:65:61:de:1e:33:0d:9b:
                    41:de:5e:aa:27:19:4e:fe:86:fd:c3:68:c1:19:04:
                    66:6a:85:da:d2:47:4a:22:58:e4:06:8f:60:09:f6:
                    73:5d:73:85:d7:98:7f:00:79:c0:7d:f2:9c:2f:09:
                    02:ac:17:e3:c3:19:da:af:0b:cd:c3:91:f4:7d:8f:
                    e1:00:98:51:5b:d5:e1:8d:49:31:dd:3e:05:1c:b9:
                    8b:48:bb:2d:e4:86:c3:b4:1c:14:01:20:81:e5:db:
                    f0:a0:cf:ee:62:6b:e7:36:e7:db:a6:fd:01:06:9b:
                    0e:94:8d:fc:ad:96:cf:12:63:3b:c7:5d:4d:18:d4:
                    da:92:89:cf:2c:f2:95:ea:c9:60:87:42:8d:51:3f:
                    4c:1b:99:50:11:db:15:ff:ca:09:ad:f8:e9:11:9e:
                    88:8a:43:dc:96:18:c2:dc:21:73:61:24:0d:51:ea:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:97:65:BE:94:AF:34:E7:51:2C:69:28:0B:08:B9:3D:A1:FB:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:57:16:8c:aa:03:d5:8c:48:2c:a6:a9:95:90:c6:43:aa:
         c3:06:e5:c8:f9:38:1a:fe:5d:1f:4a:46:e9:34:93:38:91:2c:
         4d:00:39:1a:3c:ab:09:ac:5f:20:5b:bc:8a:17:b5:34:8c:0e:
         40:ed:d9:46:66:e8:3e:fb:76:71:9d:3c:c3:ae:53:fe:a9:d1:
         22:43:b3:d7:bf:e2:97:82:28:ad:71:9f:55:5b:44:1c:11:5d:
         07:f3:f1:df:7f:3e:39:f7:45:a7:33:80:03:b7:2c:ef:b3:c8:
         f8:8a:32:16:71:ea:4d:41:0e:e8:9e:5b:72:73:dc:97:a1:3f:
         67:25:32:6d:3c:d8:62:de:38:38:9a:a8:5e:47:31:e5:87:f6:
         f0:79:63:52:5f:59:c0:8a:d7:14:1c:e9:0e:6d:04:f6:8c:b6:
         9c:6a:1e:13:b4:a1:8d:0a:b1:9c:61:13:c6:30:08:49:51:55:
         3b:78:e0:97:90:48:a8:ac:7a:c7:88:20:4f:74:2d:42:d0:e9:
         8b:d6:51:a7:65:04:8e:2d:35:b8:9d:6b:cb:4f:ab:63:3e:f5:
         db:5b:0c:b8:fd:22:63:ba:2d:15:39:89:11:c4:86:4c:eb:2c:
         77:5a:55:9e:6d:61:38:c3:f5:62:90:36:cb:65:cf:c2:df:18:
         32:03:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:54 2025 by rpki-client