Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d52c92-ed11-3bb3-9abb-10634b743b3e.roa
File:                     d1d52c92-ed11-3bb3-9abb-10634b743b3e.roa (raw, json)
Hash identifier:          BBIjlmUIkBY5O5KbEyK/ASpB4m+ClG5fZR5eJRanAqI=
Subject key identifier:   29:4E:3E:65:67:31:AE:4B:17:08:24:4B:4C:AD:52:AD:50:9C:01:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9B39806E6AD8CA52741B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d52c92-ed11-3bb3-9abb-10634b743b3e.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        2603:3005:7800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:b3:98:06:e6:ad:8c:a5:27:41:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e0afa9c8-2efd-4d35-a040-2b21f52a4ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:06:62:ed:ce:78:4c:e5:15:12:33:3f:76:
                    3e:95:bd:73:97:91:c3:17:44:76:99:64:8f:4e:28:
                    1d:ec:2c:bf:56:18:0a:2d:ab:c2:93:fd:1b:fa:59:
                    58:82:3d:93:cf:83:79:ed:ce:7a:80:a9:13:95:8a:
                    9a:d2:c7:06:77:5b:f1:1b:14:f2:de:c4:61:59:43:
                    f9:56:81:1b:d4:28:27:d9:fe:4d:d0:e0:07:04:3b:
                    43:e8:6f:a3:45:80:70:38:d5:ec:8a:e2:ba:86:2e:
                    74:c5:37:f0:4b:ab:f7:ff:27:1c:e2:19:eb:b9:09:
                    60:64:41:c2:f4:f3:0e:53:85:b0:67:c2:68:3a:32:
                    f2:c2:16:76:6d:2a:88:d3:0b:84:72:91:18:7b:1a:
                    db:97:f8:ce:b1:ef:78:f8:da:1f:e7:79:e1:ec:31:
                    68:94:79:b2:5f:30:51:a5:f7:db:23:f5:ac:6e:f4:
                    19:92:c8:c7:83:82:d5:9e:0b:a4:1f:b0:cc:0f:a0:
                    c8:f0:ba:57:98:67:6e:4a:79:36:e0:6d:c9:fb:f6:
                    91:99:a8:a1:c3:01:e8:12:59:60:14:4a:93:6f:1b:
                    95:a0:99:4d:e6:d5:e5:51:c3:42:81:d9:c8:b6:b9:
                    01:cb:c3:a2:1e:38:8d:53:16:4c:d3:16:35:f5:46:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:3E:65:67:31:AE:4B:17:08:24:4B:4C:AD:52:AD:50:9C:01:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d52c92-ed11-3bb3-9abb-10634b743b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:7800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5f:c7:1a:0b:6b:2d:31:f2:1f:76:76:02:c0:44:9f:55:64:
         c1:6d:c9:5b:0c:d0:b7:d7:33:9a:aa:0e:40:fc:ed:37:15:ba:
         c6:3a:c0:e5:8b:59:19:3e:c7:d7:24:b6:c6:b5:3f:7b:d5:f3:
         34:a0:29:bf:67:7b:a9:32:c3:dd:e3:7c:40:f1:f2:85:0b:42:
         f2:3d:46:47:72:0a:d2:1c:80:36:47:bc:89:80:26:2b:5d:5a:
         82:9d:8d:b9:bd:2f:a3:f8:d8:2e:d0:49:b0:7d:23:c9:25:c8:
         45:3a:c3:5c:0c:26:fb:02:1f:18:de:4f:aa:3c:ff:e8:1a:96:
         3d:d9:c1:4c:45:53:0c:a7:60:04:3d:19:3e:b4:49:9d:d8:a7:
         72:9e:f4:28:9a:ce:88:9e:ec:86:a7:7e:0b:72:de:ed:ba:d5:
         15:43:66:28:03:8f:dd:65:50:62:3f:21:69:e7:36:d7:29:0d:
         4b:e3:b5:f8:72:ea:37:f7:80:b1:dc:82:49:e8:9f:80:b3:9c:
         93:53:c7:72:c9:64:9b:39:f4:3e:3e:cc:0c:0b:9c:eb:a5:cc:
         35:83:95:fb:25:4e:82:ac:bc:d2:b5:9a:9b:27:01:0f:4b:96:
         96:56:57:31:09:8e:1f:26:56:f5:c7:b8:e1:50:96:24:d9:10:
         39:4b:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:57:20 2025 by rpki-client