Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0830b802-874b-3c57-9139-10172f2edb07.roa
File:                     0830b802-874b-3c57-9139-10172f2edb07.roa (raw, json)
Hash identifier:          3SdGZIi05ISEVI8Wt9JYogG8eOZm2SYs54PZMioD+2g=
Subject key identifier:   B7:5D:91:82:6F:33:4B:D0:4B:67:A1:79:83:6A:49:17:A2:77:B3:CD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F82994611C11F32385D400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0830b802-874b-3c57-9139-10172f2edb07.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397235
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:29:94:61:1c:11:f3:23:85:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e7621fd5-8282-4c05-91d3-38e5bd82b64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:9b:77:1b:a5:1a:99:6f:38:c9:02:33:d6:
                    dc:1f:3e:1a:be:3f:ef:2a:ee:6e:a4:97:00:26:1c:
                    09:84:81:21:be:d9:b6:7c:bd:40:1c:8b:ab:68:b8:
                    d2:46:fc:e2:ef:72:f7:f4:fc:0b:66:f6:4e:76:e1:
                    1a:48:65:f3:5b:71:bd:90:ad:88:77:75:8e:7f:1e:
                    0f:3b:9c:1f:ae:fe:f7:6b:81:e6:75:10:57:90:f8:
                    8d:41:84:0d:3b:09:27:f6:75:a2:73:50:14:0c:89:
                    03:11:1f:b5:da:2d:db:99:86:a5:a0:82:cf:58:48:
                    92:26:95:a8:27:9c:91:5c:d7:ec:41:66:9e:74:55:
                    e0:83:a0:84:40:84:63:b9:63:fd:89:fe:70:a7:39:
                    c9:49:21:34:40:a6:35:94:ed:03:a5:c0:66:47:9f:
                    72:4a:41:30:f6:26:f6:fa:b2:98:3e:76:19:60:85:
                    dd:b9:8e:26:11:56:46:de:c1:68:eb:f6:47:a3:0a:
                    b0:6e:9a:08:24:43:ac:ba:16:96:59:88:09:00:49:
                    5b:02:13:40:93:a8:12:8c:43:a4:8e:29:0e:77:49:
                    df:36:73:56:a5:e4:2d:08:f3:56:58:02:6d:d0:73:
                    cd:24:17:45:0f:fa:92:c3:6c:c5:f2:26:3d:b7:1d:
                    f1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5D:91:82:6F:33:4B:D0:4B:67:A1:79:83:6A:49:17:A2:77:B3:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0830b802-874b-3c57-9139-10172f2edb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:b5:ec:ec:49:81:8f:a4:52:f9:7e:92:a4:5c:fa:48:b2:
         72:eb:8c:d3:0e:65:32:9e:f5:dd:2a:f2:dc:38:ae:7d:e7:35:
         a2:e2:ee:29:59:8e:6c:6e:f1:b3:2b:a2:ae:85:12:a7:fb:9e:
         03:8e:a4:69:f5:26:63:b0:ea:23:d2:b8:4e:df:44:da:fd:9b:
         d2:2c:21:23:0a:9b:f3:75:1b:73:a3:d4:16:70:d6:14:cc:a1:
         da:01:62:7e:88:15:23:d9:75:03:63:2c:d4:e2:73:ec:a6:a5:
         0e:3c:65:82:b8:63:75:8c:42:1a:63:b3:fb:e2:27:fb:8c:82:
         01:a2:0c:a9:aa:ef:d3:76:9b:0c:6e:fa:dc:22:eb:8d:c9:4c:
         f7:44:26:48:6d:3b:11:23:9c:92:48:df:e2:b3:67:5a:ad:a5:
         86:cc:c1:49:05:34:bf:f0:56:bc:92:56:b7:77:20:45:14:bd:
         b0:82:4d:41:8a:6f:8c:fc:3d:19:c2:e1:0b:34:8e:12:c1:8e:
         08:9d:04:00:78:d3:4a:56:7e:05:69:2e:6f:db:c9:bb:ec:8f:
         fe:fa:c9:5e:f6:91:e8:20:fa:83:8d:69:d8:c4:43:28:74:0e:
         52:dd:1c:8b:a0:7a:63:59:8f:26:62:a6:91:1b:46:93:f1:18:
         25:d4:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:14:38 2025 by rpki-client