Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3722418f-1423-3c27-b2b7-ea0a45ab4f83.roa
File:                     3722418f-1423-3c27-b2b7-ea0a45ab4f83.roa (raw, json)
Hash identifier:          3onldtU036awTMG8WnNmihUkuvK8T+079I/iSuKpdsE=
Subject key identifier:   0E:65:3D:52:10:30:78:28:0E:31:37:64:0D:1E:D1:45:61:9B:02:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9039DCC02703077095618
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3722418f-1423-3c27-b2b7-ea0a45ab4f83.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        2603:22c2::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:03:9d:cc:02:70:30:77:09:56:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=b0ac50b2-c924-4c7c-97b3-af7161d7580f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:43:28:38:4c:4b:15:6e:cc:75:66:72:63:
                    c0:d3:1e:ff:50:c1:52:07:27:39:db:7a:4c:72:6e:
                    e9:a6:f3:1c:97:0f:a0:1d:22:2e:4b:8f:01:e3:af:
                    57:a6:2d:1f:8d:6c:79:4a:71:39:bc:14:67:ee:a3:
                    53:52:3c:13:a9:1a:03:dc:d6:94:16:f3:c2:aa:80:
                    e9:9a:2c:ca:3f:78:a5:66:d3:69:15:f4:d6:18:34:
                    ca:6b:90:12:09:a4:0a:9a:01:19:0d:52:67:9c:06:
                    50:3c:22:5e:c6:b0:88:ba:7f:bc:ab:a4:a7:11:e2:
                    f6:f4:62:40:4c:15:ed:f6:b2:37:6e:82:b3:86:9e:
                    e5:fb:c5:83:f1:c3:59:55:c6:b6:a8:0d:65:c1:b5:
                    a5:a0:21:93:9f:b1:bd:e8:52:f2:c2:32:60:25:26:
                    81:11:30:12:18:11:2e:27:c6:f2:6f:da:9c:fd:1e:
                    52:62:a7:8a:b6:9a:7e:7b:b0:b6:c5:3a:e3:de:24:
                    4d:c8:54:ce:de:94:01:88:88:bc:6a:58:a5:67:04:
                    61:84:ae:0c:89:41:52:8c:d4:95:b4:36:03:0d:57:
                    0b:8c:e2:6a:c7:0d:b4:bf:90:c5:69:67:34:43:46:
                    54:ff:be:0e:87:e1:cd:b9:b6:b3:0c:d6:86:d1:ab:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:3D:52:10:30:78:28:0E:31:37:64:0D:1E:D1:45:61:9B:02:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3722418f-1423-3c27-b2b7-ea0a45ab4f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:22c2::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:05:05:97:16:15:32:38:d2:74:39:e7:5f:22:6b:c6:82:4f:
         39:9a:65:4f:13:0f:41:38:df:bd:bc:e1:fd:d3:f1:85:40:12:
         95:0b:6d:3c:68:d9:f2:8f:8d:14:85:cc:a7:1b:0a:81:a0:a6:
         7e:42:75:be:3a:a6:e9:d5:a1:d5:1f:6a:50:00:8b:fa:72:29:
         d8:8f:58:24:5e:18:e8:74:52:dd:5a:62:6b:4e:5a:e6:4a:ab:
         b2:49:b0:37:bb:71:61:b1:0f:03:ed:17:04:13:d0:ce:f3:19:
         fd:fa:79:a8:99:0c:d0:eb:38:ec:21:fd:45:5b:6d:ef:64:3d:
         ca:9e:bf:7e:af:79:38:f8:84:80:01:84:b4:c1:89:1a:e2:ee:
         77:6f:4a:25:d9:5f:50:77:4a:4f:0c:66:27:8b:3e:57:fd:82:
         83:7e:83:2b:d3:b0:7b:e9:98:dc:e2:d5:b0:2e:d4:fb:6b:83:
         7f:1a:30:c1:bb:e6:d8:fe:97:07:bf:5c:fa:eb:b6:cc:19:ad:
         55:51:75:8e:ef:9a:da:8a:1c:01:e3:72:c0:dd:7b:7e:de:1d:
         2a:00:b1:03:13:99:ae:38:c9:9d:46:cf:a1:ef:9c:62:9e:f8:
         d4:25:03:a7:17:49:34:d3:0f:0f:23:ff:eb:55:a4:d0:b2:1f:
         8d:20:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:33:32 2025 by rpki-client