Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
File:                     ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa (raw, json)
Hash identifier:          Ij+3jdvam+JInkDvF/3m56i3HRRaxglOv6ErkyEh+F8=
Subject key identifier:   B1:1D:6F:13:2E:22:50:14:EA:19:6B:47:2A:43:AF:6D:8F:70:CF:31
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584BA7CD09A112A667D2412D6400
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        2607:1c0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:09:a1:12:a6:67:d2:41:2d:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=e9fbdae1-f812-46b8-a23e-3b41ae662460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:ba:c1:ef:b9:c4:42:82:fe:b2:8b:8c:f7:
                    a4:8a:4c:92:09:6a:fc:f2:27:a5:69:fc:b9:8a:a3:
                    55:02:b5:21:f8:98:ca:f1:e8:08:ed:6f:da:b1:94:
                    99:98:5e:64:3b:0d:02:e8:dc:e0:b4:a8:7c:f5:12:
                    41:d1:72:4b:d4:36:82:aa:25:0a:44:d0:63:98:88:
                    57:2a:e7:e7:dc:73:d6:c8:9f:3c:4c:85:df:93:92:
                    0b:05:c3:e8:bf:54:de:f5:58:93:a0:18:3b:cd:09:
                    dc:d2:90:0b:c7:3d:b4:28:e6:99:92:5e:b5:40:70:
                    3f:db:7f:bf:5b:eb:e3:d4:c3:44:11:62:ff:8c:b7:
                    7c:b2:62:42:f8:7a:c9:c6:cc:0f:82:e5:c8:d5:53:
                    44:5b:39:5a:fb:54:e8:b1:3d:9c:13:db:fd:42:ca:
                    62:d8:0e:89:ce:d3:15:a0:99:ac:87:3d:a5:fb:0d:
                    7e:e5:78:01:94:2e:0a:3b:e5:3c:68:7d:7d:c8:3a:
                    f7:76:c0:74:25:35:26:4a:04:0d:8d:b5:75:44:6e:
                    92:e5:53:e7:4c:8b:cc:18:dd:c3:3e:cb:c5:80:e3:
                    35:14:9e:f7:98:35:9e:7e:31:1e:5c:92:3d:41:38:
                    d3:50:23:ca:d8:ec:58:6b:e3:6d:d0:a4:80:66:87:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:6F:13:2E:22:50:14:EA:19:6B:47:2A:43:AF:6D:8F:70:CF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ce0f51ed-90b3-3457-ac96-5d6302fb9fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:fd:20:3e:90:85:ba:1a:5c:95:ea:1b:47:2a:c5:5d:dc:
         dd:8f:a9:f7:db:44:a3:cd:6a:97:1f:b0:f9:01:97:a9:46:eb:
         9a:61:cc:f2:e9:48:c0:58:56:75:f6:39:f1:4b:3b:0f:19:a7:
         5f:42:e8:b1:4c:d7:b2:d9:95:ea:00:70:22:4a:9b:c4:5a:7a:
         81:0b:58:3c:c0:e4:88:9b:78:16:1e:e4:4a:58:78:84:a1:c9:
         f1:bd:8e:d1:37:ca:d0:bb:2e:6e:c7:fc:71:a7:fb:bc:99:bb:
         eb:5e:d7:b6:d2:37:e3:a9:ef:36:85:94:c3:d3:4a:05:dc:ce:
         a8:2b:ef:f6:49:7a:58:1e:3e:4f:a2:88:88:e0:b3:33:81:e7:
         c2:27:13:34:84:ce:0a:1b:06:21:a4:7b:ba:e6:22:b1:2e:ab:
         2e:d9:fd:86:b6:e1:4b:bf:6a:2d:10:ef:3d:1e:a5:15:88:57:
         23:32:82:38:4d:1b:a3:95:4a:47:56:ca:e0:d4:8e:94:70:ba:
         cf:92:72:6c:8e:24:25:6a:07:f3:91:1a:3d:86:b8:0b:b5:5d:
         83:d8:55:35:64:c8:54:2c:e5:83:cd:8a:06:14:60:ee:9d:9b:
         fc:3e:5f:0d:87:94:d6:bb:96:2a:6a:3a:da:8f:e1:8e:f9:74:
         02:89:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:52:29 2025 by rpki-client