Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
File:                     404cefd8-7ea1-3fe6-b88b-275975481a6d.roa (raw, json)
Hash identifier:          baQPaYzj8RBcBD/AtJTBoH0jMj7O1nno7jqs9equ3P0=
Subject key identifier:   86:F9:CB:33:6F:03:EC:20:CD:29:5A:64:56:89:DD:27:59:66:07:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD627C22483066A9564E2240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36616
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:7c:22:48:30:66:a9:56:4e:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=827c2693-ef8c-46d4-bbb8-00d3c2786f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:aa:2a:ee:bf:50:8a:31:3b:71:ce:37:b0:
                    e7:31:88:01:0e:46:35:b3:3d:55:6d:16:c1:cc:8f:
                    53:fc:62:0c:ae:44:f8:06:fa:d3:d8:e1:bd:88:c4:
                    ed:fe:63:ae:47:2d:23:2d:0e:dc:c0:65:b1:24:56:
                    24:02:b2:4d:34:43:4e:4a:d5:fd:08:7a:11:7d:09:
                    39:02:21:48:c2:c9:65:9e:82:4a:be:30:c5:cd:8e:
                    d7:d8:e7:89:99:25:15:0e:19:d4:3a:b3:76:94:9f:
                    a3:fa:7e:32:a6:df:7c:b0:40:4e:4b:f9:7d:17:fc:
                    0d:b7:ee:61:9f:fb:af:68:f1:ab:2f:7e:8b:d8:c5:
                    56:74:de:09:e2:73:78:66:8b:df:11:80:c4:d4:df:
                    a4:44:09:db:18:5c:c2:7a:0b:c3:0e:45:ac:a1:2b:
                    6c:22:19:9f:ac:24:b7:b4:ce:69:d8:64:dd:09:52:
                    48:a6:98:84:85:b2:52:27:a9:8c:48:82:03:30:2b:
                    7a:54:8a:4d:e0:ca:f9:7f:4c:32:82:43:a8:ae:8f:
                    12:4d:42:81:27:96:55:b4:38:02:02:cb:5a:85:50:
                    8c:38:c4:40:26:10:4e:85:9b:c6:0b:88:ca:04:06:
                    82:24:7f:b1:c6:3d:1a:ae:b8:98:6b:05:26:7b:a2:
                    ed:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:CB:33:6F:03:EC:20:CD:29:5A:64:56:89:DD:27:59:66:07:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9d:fd:b4:e1:3c:0a:98:63:f6:5d:97:b4:c9:9a:23:a5:b6:
         e5:a9:88:18:b9:95:c9:5e:cd:7c:7e:56:06:a6:d5:2d:91:ae:
         40:ce:15:f3:bf:fe:7b:55:a9:53:56:b3:29:16:a3:aa:53:c9:
         a9:90:c8:49:b3:df:15:67:3a:17:d5:35:58:a2:28:db:73:9d:
         eb:ef:ef:0a:dc:10:c4:89:f6:ec:60:e8:eb:ad:d8:07:8b:cd:
         0e:e1:c4:16:2a:2d:8d:4c:7c:31:f6:37:c3:fd:97:88:18:14:
         dd:00:c5:b7:49:b4:8f:9d:e2:de:b4:87:6b:3b:06:35:74:cd:
         d3:71:49:94:c2:85:5c:b1:8a:de:61:16:c6:19:68:aa:b3:61:
         c1:3e:21:ba:a2:5f:87:f8:f3:e9:ce:f3:fa:37:c9:a6:20:fd:
         2f:a8:90:e3:a0:b8:2f:7d:50:c6:c9:ea:81:47:45:54:1d:ff:
         dd:3d:e5:e3:02:0e:86:ae:44:ea:db:15:14:78:df:10:62:07:
         db:b4:74:49:72:a4:c5:03:04:1f:3a:59:76:25:55:08:55:a3:
         82:52:3a:31:ac:8f:1d:3d:ac:41:36:4c:2f:dd:71:e7:04:1e:
         6d:92:4b:7f:33:ec:af:df:a2:a6:0e:e8:4b:55:9c:34:09:2e:
         c5:2e:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:16:26 2025 by rpki-client