Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6061826a-b559-35c1-854f-60b8032ebda9.roa
File:                     6061826a-b559-35c1-854f-60b8032ebda9.roa (raw, json)
Hash identifier:          WCt8ezJW4od8whTc+vbd8jIBjrmMpTqG9kE7h9suSWE=
Subject key identifier:   41:5B:07:D2:0E:78:11:32:11:C6:94:E0:EB:CD:2F:FB:EC:B3:F5:E3
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328584BAD625363B8B6335E08ADB100
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6061826a-b559-35c1-854f-60b8032ebda9.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        216.126.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:53:63:b8:b6:33:5e:08:ad:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2bb47fae-53c2-4ef2-be7f-8e58a36726ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:8e:82:d0:df:8d:27:d2:f2:51:ce:23:34:
                    2d:56:7d:8b:b7:2c:0d:a0:1c:fe:e0:89:8a:0f:32:
                    06:69:ca:21:73:47:5b:e9:bd:00:0c:fb:c9:ed:e6:
                    24:fb:52:7a:fa:95:22:a8:41:17:81:4f:fd:58:13:
                    3b:87:e5:ca:74:be:9e:24:d2:8b:75:ec:19:f1:f0:
                    f4:db:fc:45:1b:a2:2a:7f:99:04:04:80:f0:0a:d2:
                    a5:af:0b:ed:ae:b3:9f:a0:43:b4:7b:e2:59:17:98:
                    9c:a2:1d:e7:12:3b:07:2a:54:63:a1:30:9b:7a:9c:
                    37:55:81:82:d4:96:30:eb:66:e0:a2:63:83:99:4b:
                    e4:78:0e:96:31:b3:53:17:e2:8d:54:fb:27:cb:23:
                    0e:a2:43:ef:f8:99:21:dd:a5:42:f4:a2:49:74:b9:
                    9a:44:1f:3d:2b:05:00:fe:e6:c3:fb:6c:27:f9:76:
                    c0:7d:be:7a:92:14:ec:0e:b4:d2:63:43:2b:f4:02:
                    c0:6b:78:f3:61:cf:da:69:ba:86:c0:7e:95:71:9e:
                    e7:1a:df:e3:49:5d:0b:fc:83:f1:b9:9a:39:df:ca:
                    a7:c0:1d:0c:bc:2a:05:78:a1:7d:99:4d:1e:a7:5f:
                    c9:70:9f:83:8e:3c:ae:60:c4:7c:72:09:e3:ac:93:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:07:D2:0E:78:11:32:11:C6:94:E0:EB:CD:2F:FB:EC:B3:F5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/6061826a-b559-35c1-854f-60b8032ebda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:37:3f:86:42:ae:d2:e6:7a:58:3b:3f:41:e0:4a:3c:77:
         cf:19:9f:ce:b2:8c:0d:ef:8b:b1:70:8e:26:70:f9:7d:75:43:
         91:c5:da:02:82:ba:36:4e:00:8b:b9:3c:2a:88:11:ea:c5:61:
         f9:44:dd:01:99:18:a8:38:eb:c6:e7:3f:93:56:02:52:05:0e:
         1a:d6:d4:5c:4d:88:5c:5d:9c:4a:33:dd:e7:14:8d:af:ca:30:
         6b:68:10:b0:ca:29:fc:1b:2b:9a:f7:30:30:38:d3:f4:4b:6d:
         8f:fb:9d:54:5a:bf:79:89:dd:f6:d1:25:ad:78:07:70:8d:c1:
         8f:14:25:c5:92:59:ce:fb:78:68:72:f1:15:41:c3:62:a2:d6:
         b0:44:f1:5b:2b:d0:f5:b3:3a:50:5b:be:1a:e2:cd:cb:8c:3a:
         4b:23:26:93:96:e4:28:60:f4:46:9b:b9:11:c5:2a:86:99:c1:
         54:2e:65:21:23:b9:5c:78:cf:05:8b:ee:b4:0b:3a:24:c9:02:
         5a:c2:3d:78:e0:d7:a7:e4:3c:63:bf:a1:b0:48:18:7c:0a:b2:
         0a:37:29:f3:29:9b:db:21:1b:80:0a:ef:85:3f:22:83:c8:b8:
         de:a7:ed:66:14:47:b9:47:a1:4b:a8:cc:33:e3:d5:a4:97:3d:
         87:0b:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:42:02 2025 by rpki-client