Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
File:                     5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa (raw, json)
Hash identifier:          C4glY+Bc0Mp4j0Mtdz7lO49liKLuVdqZ6nfzjIiCHaM=
Subject key identifier:   4B:60:FC:EC:37:1E:E6:A1:35:DC:2D:B6:E5:25:57:24:92:A6:79:82
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584F82ADC6D89AE951B908985788
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     17025
IP address blocks:        2001:438:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:c6:d8:9a:e9:51:b9:08:98:57:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=95b35a63-f177-4d8e-a2aa-4609b299fa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:06:89:71:ed:79:e8:a4:90:0a:7a:10:03:
                    ac:c8:c3:cd:6f:58:81:1c:3c:2e:78:14:6b:8b:da:
                    6a:29:b0:70:53:56:12:af:3b:8c:1a:c3:fe:28:f6:
                    a3:4c:e1:67:7c:43:c2:95:1e:74:40:5f:1f:92:d3:
                    b4:6a:66:99:6d:9b:f8:53:a6:69:1d:62:09:21:88:
                    2e:79:60:2f:f8:d6:85:9e:a0:39:38:a3:53:3e:84:
                    31:06:7e:bf:86:98:08:76:6b:d3:d4:54:65:9a:fe:
                    61:49:e2:2c:10:0f:8a:97:a0:2e:cb:7b:88:41:b5:
                    ff:d9:00:38:fd:03:f4:16:0e:e4:5f:5c:49:56:47:
                    1b:ab:d5:13:78:13:6f:7e:79:ee:c2:7d:67:79:f1:
                    8b:17:b8:33:bd:81:31:32:b2:3a:f1:91:ac:dd:4f:
                    05:29:a7:14:34:1c:52:63:0e:2e:0e:bf:e5:58:0e:
                    f2:96:25:08:55:4c:e0:a3:95:74:fc:12:2f:8e:d3:
                    87:db:14:cd:a5:78:30:a6:8a:6a:5b:b8:8a:91:64:
                    7a:96:82:e7:90:ee:fc:af:66:34:fa:cd:f0:79:32:
                    3c:1e:3c:a4:aa:9c:2a:e3:ee:4c:8c:37:64:16:c4:
                    4a:6f:04:1c:96:60:b5:9d:cb:a9:b0:7e:db:2e:50:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:FC:EC:37:1E:E6:A1:35:DC:2D:B6:E5:25:57:24:92:A6:79:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:2f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a2:c3:2c:aa:e7:46:2d:ad:ed:16:30:6c:1b:17:5e:63:b7:
         22:58:ef:6a:98:8c:7f:12:a3:98:0f:f8:9b:e5:81:30:b9:ff:
         89:b8:08:60:28:d0:0f:1d:e4:f3:eb:03:b4:53:d7:a7:38:7b:
         79:c7:26:26:4b:c5:3a:d9:25:0f:ce:87:c7:c4:83:5c:28:c3:
         b8:18:58:67:ce:07:4b:e0:59:bd:6d:2f:58:22:15:22:1a:99:
         08:c7:96:ea:d4:03:ee:c7:10:e7:3f:3e:ce:27:15:24:b0:28:
         67:9c:44:2b:f4:c5:f4:04:f7:d8:95:86:db:9a:d9:40:c4:8d:
         99:bc:a8:87:23:64:40:28:0a:eb:66:77:f2:b1:18:ef:6c:1b:
         f5:d2:97:11:55:b2:db:c9:b0:6f:fb:ae:39:5b:27:f4:9e:83:
         62:4f:f5:cd:4a:10:fd:dd:99:61:a4:60:79:aa:36:0c:de:8f:
         0b:a0:bd:b6:ec:e8:0c:d2:6e:c8:25:68:63:48:dd:8e:a6:9d:
         9f:8f:6f:29:56:00:f0:c0:af:b6:ac:65:87:5e:4d:cd:b1:ba:
         81:45:0d:16:ad:96:85:0f:23:5d:24:84:81:7b:2d:33:d2:35:
         57:4f:c6:e2:81:69:6f:00:01:3a:e7:15:97:91:78:98:26:5d:
         fb:1d:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:36:44 2026 by rpki-client