Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa
File:                     5d3b4b45-13c7-3423-b435-8a8330a241f0.roa (raw, json)
Hash identifier:          Ynv+ER8UtIfr8ZvtF3ZRqIqRLJeMNUCWNszfl+swUWw=
Subject key identifier:   5B:F2:3A:BC:67:3D:F5:28:8A:9C:5E:B6:4F:77:06:AA:A6:3D:E5:CC
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B259F57EF21200C343A2DA300
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa
Signing time:             Wed 10 Sep 2025 09:53:40 +0000
ROA not before:           Wed 10 Sep 2025 09:53:40 +0000
ROA not after:            Tue 09 Dec 2025 10:53:40 +0000
asID:                     26383
IP address blocks:        2605:e440:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:9f:57:ef:21:20:0c:34:3a:2d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Sep 10 09:53:40 2025 GMT
            Not After : Dec  9 10:53:40 2025 GMT
        Subject: CN=193e5171-4761-42f7-8b61-19372b3b40db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:f9:4c:3a:8d:06:a1:5d:15:0e:f5:ca:5d:
                    97:61:a1:eb:03:ac:5a:e6:f5:3f:20:09:58:5b:00:
                    cd:c1:22:46:e2:0f:74:c6:61:90:92:27:a3:a1:46:
                    bf:a2:6d:89:3a:23:c0:7d:a3:49:3b:df:f4:67:d4:
                    92:00:ff:21:dc:46:22:86:5b:91:c5:8c:9c:28:bc:
                    9a:a9:31:24:ef:ab:28:a7:a6:c5:7a:e7:85:e4:13:
                    13:e0:c2:33:57:b7:43:21:b7:7b:18:64:f5:f5:6b:
                    fa:6c:de:27:76:9f:3d:73:a6:1d:b6:36:a1:dc:ee:
                    8f:fe:d7:58:7b:b8:74:e1:a0:31:02:db:6d:93:4e:
                    9d:a8:72:8b:b1:f6:09:ca:d8:04:f2:8d:3c:d8:b9:
                    b1:4a:4c:cb:dc:1e:ef:55:47:c0:62:e1:23:ec:29:
                    d1:fd:3f:58:56:bf:4d:4d:4f:ca:9b:80:d8:c0:62:
                    90:26:c5:70:3e:12:83:5a:5a:7b:3c:98:27:34:38:
                    5a:68:11:80:2c:45:b1:9d:18:e1:61:4f:94:da:86:
                    b1:e3:c5:04:94:a5:16:94:5c:87:42:bb:67:2a:7c:
                    de:8b:7c:3b:f1:4b:e2:b8:e0:b4:18:60:c7:91:69:
                    d2:3a:be:c0:07:a9:b3:cf:8e:09:63:86:23:84:42:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:3A:BC:67:3D:F5:28:8A:9C:5E:B6:4F:77:06:AA:A6:3D:E5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:20:eb:2c:97:56:ba:87:90:39:d9:cb:59:7d:35:64:71:
         bb:62:14:85:7d:f0:74:58:a2:2d:24:e9:ca:71:be:3d:67:81:
         aa:36:23:b7:c8:99:b3:8c:29:be:0c:c5:41:b4:3c:0e:e0:22:
         73:60:77:8d:66:c7:77:48:a6:1e:a6:c5:17:a1:1f:cb:cf:61:
         50:b8:0e:b4:2d:a4:3b:ad:13:36:f1:c4:98:4a:a4:30:a6:b9:
         a8:88:94:db:bf:4b:0e:ab:a2:43:5e:c8:ba:0c:71:92:38:c0:
         0e:d6:8d:b6:f9:24:21:0a:99:9d:41:c1:1c:93:46:52:5a:0f:
         b0:55:51:3f:e4:bc:d7:37:32:3c:17:83:8c:b8:7d:48:cb:c9:
         82:3e:f2:bb:89:89:79:89:e4:31:30:a3:bd:a4:f5:4a:fe:c4:
         c4:e6:80:15:95:f8:ad:ea:d0:05:df:d2:ba:1d:63:19:6e:d2:
         6c:89:79:b6:a9:4c:96:6d:4b:e8:be:1b:90:5c:da:83:21:d5:
         af:6b:91:8a:49:3b:88:3e:0e:fe:2a:c4:da:6c:7b:b9:5f:55:
         53:51:fc:f7:db:42:3d:ff:eb:ee:10:7e:8b:ee:98:99:7b:04:
         0c:14:04:d6:30:ec:d7:8b:f8:15:41:68:ce:d8:2e:4b:89:f5:
         d5:cb:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:21:58 2025 by rpki-client