Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa
File:                     dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa (raw, json)
Hash identifier:          utCvPtRufaDqzrjZ6xJ/1Hnfn6G4a0qdQSmzgfwmcYc=
Subject key identifier:   F6:2E:30:CC:28:95:7E:16:A2:D6:EB:E3:C2:D6:96:61:C0:40:47:A2
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F4328584B8A7CD051A5C96A395C17D600
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        2607:f5f0:1fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:d0:51:a5:c9:6a:39:5c:17:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=5449ef3e-3997-4024-b3dd-b8100ff40a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:04:f5:0e:c3:99:5a:da:02:48:38:83:8d:
                    a2:c8:6d:d1:2f:07:d5:4d:ed:69:c8:df:3f:b8:86:
                    ac:88:63:6d:f4:c1:9e:52:9e:9c:a4:c4:94:0e:70:
                    9c:0b:cb:bf:9d:d8:95:6b:d7:49:90:73:30:99:24:
                    bc:d3:54:a8:e9:86:03:11:36:45:b6:bb:7b:bb:e0:
                    f4:51:1b:b0:14:ac:e3:d0:87:b1:61:ef:79:1c:e2:
                    9c:1f:18:b0:5e:6a:ce:65:82:2c:e7:00:c1:81:0e:
                    d4:1b:7b:2d:7d:2c:b6:16:5e:dd:e5:b1:8c:bb:17:
                    d7:24:76:11:6b:76:03:e3:bf:01:cb:dd:55:8c:40:
                    29:73:88:d6:17:12:72:fb:b3:fd:f5:ba:f7:8d:22:
                    73:90:3a:95:db:db:cd:03:38:9e:41:b5:b7:30:fd:
                    75:78:bf:0c:58:39:e2:c3:3c:a9:d6:02:ec:67:af:
                    6a:dc:0a:d8:aa:1e:a0:e2:27:77:9c:3f:70:3b:75:
                    af:bf:56:25:79:ae:a3:99:5b:fc:a7:22:81:a4:bb:
                    eb:00:72:b5:ce:8a:88:46:a3:65:8a:51:59:ec:2b:
                    ea:5f:36:9e:6c:4e:a4:91:87:d4:08:11:e1:06:fb:
                    cf:aa:43:de:a3:32:63:ea:c2:25:80:75:57:8d:56:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2E:30:CC:28:95:7E:16:A2:D6:EB:E3:C2:D6:96:61:C0:40:47:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5f0:1fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:99:88:7d:d6:44:55:a0:d8:e7:36:97:71:cb:b6:0a:2c:36:
         64:fe:32:6e:1c:5a:c7:03:98:6a:31:1a:ef:25:38:a1:d4:82:
         ea:f2:c8:ab:89:69:a1:40:8e:fb:a4:8f:b2:60:94:67:ca:da:
         29:96:df:0b:b6:14:01:0a:3a:57:bb:48:df:75:f5:f1:35:43:
         48:62:aa:c5:61:c3:6f:30:ec:b3:76:80:a0:ad:09:d1:e4:96:
         79:fe:56:4a:cc:fd:8a:49:eb:eb:46:2a:f7:55:6b:46:89:b7:
         f3:3b:19:e7:81:a6:00:70:ec:a7:7c:ad:d5:06:31:7e:1b:3c:
         b0:b8:87:26:a8:d7:8f:1a:9c:12:a9:b4:06:cc:ea:e7:ef:19:
         5f:1f:f4:2d:3d:55:b4:b1:ae:bc:88:bc:58:a6:22:86:0c:b7:
         32:70:45:25:d7:37:27:d6:ec:87:36:07:83:4d:d2:5f:da:02:
         a6:61:13:d1:b9:26:8a:7e:89:d5:e9:4f:7c:5e:44:69:7d:06:
         c3:10:71:44:a5:aa:56:88:fc:0e:b5:42:43:8e:ec:b6:47:54:
         12:78:57:05:c7:74:b8:d6:6e:05:95:d2:62:6f:2b:c0:5e:ac:
         8f:d2:cc:36:63:98:9a:d1:7a:c4:fd:e1:a5:d8:ac:76:fe:81:
         33:3f:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:44 2025 by rpki-client