Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa
File:                     af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa (raw, json)
Hash identifier:          57tD6rA4u//zzpZSr+f9FDnJsBpE6V3n9VdEJQs7e3U=
Subject key identifier:   3A:ED:80:93:A7:FE:DD:97:BF:CA:8A:36:E3:87:83:91:E2:9E:33:28
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584BA7CCE9C499DEE4B3C361DC80
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     16276
IP address blocks:        2604:2dc0:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e9:c4:99:de:e4:b3:c3:61:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=e4b2598c-bf6d-4126-a908-5f58453577ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:8f:15:e7:d0:88:be:24:db:02:65:35:d4:
                    35:c8:ce:88:10:4e:06:78:d8:f6:8c:c9:58:34:09:
                    7e:ec:30:fe:1e:ad:07:f3:20:0e:b5:e8:05:c9:c7:
                    da:b4:57:78:e8:27:95:ab:1c:ff:24:4f:6d:1a:b0:
                    4d:5b:3a:ec:1d:4e:3c:92:e4:f6:96:88:94:f3:4f:
                    8f:45:f2:b2:4e:41:0b:b0:99:72:2d:ce:de:24:63:
                    17:ef:18:da:27:f9:3d:78:02:3a:c7:f3:5f:a6:08:
                    5c:e5:7f:40:ef:24:3a:4c:a8:f1:11:68:14:dc:50:
                    d7:2c:01:32:ab:60:aa:f7:ad:02:50:46:d0:0c:53:
                    55:a7:17:f7:f6:90:21:75:86:1d:d7:1d:f3:6e:68:
                    28:61:41:a3:72:cf:b8:7b:d0:17:cc:b9:2e:c1:04:
                    65:75:72:e7:c6:e7:a5:64:b9:7b:f2:0d:bf:87:ec:
                    af:53:af:80:8c:ef:fd:20:5f:fc:67:ca:b3:66:47:
                    44:b9:e9:ed:57:ec:b7:3a:36:68:ca:47:4f:4c:e7:
                    80:6a:22:32:02:e2:b1:c7:d3:3d:35:75:75:2c:f6:
                    6b:69:99:3c:7d:c1:bf:74:07:9e:5e:1e:2e:ef:42:
                    0c:cc:a4:e4:6b:e3:01:76:48:3a:de:3f:77:a5:d8:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:80:93:A7:FE:DD:97:BF:CA:8A:36:E3:87:83:91:E2:9E:33:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/af41bab0-da7e-3f7e-a97d-d5fc3589b5b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2dc0:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:94:7f:05:2a:eb:51:47:21:35:bb:d4:e3:85:85:69:17:
         fd:2d:f0:a4:d2:ef:ce:79:a3:ca:19:7b:cb:34:9c:ef:42:2c:
         dd:1e:90:82:8f:6c:f4:14:39:2d:5d:98:90:9c:f3:c0:ad:e3:
         c0:b1:7c:f6:21:65:27:ff:a1:35:64:94:e8:85:b7:f7:76:64:
         87:77:ad:8c:35:35:5e:39:10:90:0b:0e:92:16:58:64:e9:a5:
         dc:fc:a8:67:58:f4:37:46:34:af:ea:2f:75:cb:29:82:16:3b:
         95:bf:c2:7d:5e:ed:a9:99:7f:f9:ed:71:46:44:7f:67:8a:c0:
         3b:4a:7a:dd:e3:61:6b:bd:35:18:5c:98:0b:5e:cc:b7:d5:4f:
         48:8c:1e:ad:98:73:d0:a0:6e:f7:f7:cd:fa:17:77:c8:33:12:
         23:a2:54:f8:97:92:1d:1b:39:b0:7e:50:8e:ec:eb:87:8e:38:
         16:29:6e:05:05:47:ea:1e:a2:fe:b3:f7:80:53:76:0f:16:9c:
         83:a3:18:a1:30:49:44:ff:0c:1a:73:fb:58:84:28:0f:d1:c6:
         87:d3:69:aa:3b:0b:72:48:b6:7e:52:f0:73:32:91:12:74:73:
         c5:74:b3:6f:98:a2:6b:bc:d8:4c:67:3b:31:b2:59:1e:8f:0c:
         cd:75:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:58 2025 by rpki-client