Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa
File:                     42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa (raw, json)
Hash identifier:          B6SyBEwpu4lSdhk/dR5qBI6f2/rg0PE6UDeI4i/xMoU=
Subject key identifier:   4D:0C:89:D6:01:8D:CB:0E:2E:BF:79:FC:95:0D:C6:A6:F5:4C:80:3E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584BBB75A43E5339AEE68D7C0AC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        2605:4300:3b08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a4:3e:53:39:ae:e6:8d:7c:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=91566707-655a-4d3d-9730-aa3b9c34d673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:79:d6:ec:47:ec:9c:ab:26:d0:7c:ce:01:47:
                    34:d6:e5:3c:80:ef:d5:fa:36:25:aa:65:22:72:82:
                    e4:2a:9f:35:9a:45:bb:f3:be:f4:f8:83:2e:a6:49:
                    fb:29:f6:f0:8d:41:9b:29:44:81:16:e7:b0:4a:c0:
                    85:ff:ee:c7:39:64:b7:d3:d9:f8:e9:c9:82:27:d8:
                    ac:d9:82:8f:2d:3e:6d:78:c9:1f:80:31:99:fa:38:
                    af:f9:41:df:a5:f0:62:62:85:ec:9a:35:00:e9:57:
                    af:af:e5:94:34:34:4b:10:78:05:99:42:e9:62:f3:
                    77:20:e1:f1:8e:7f:e5:90:83:b3:fe:a6:ff:a9:d7:
                    af:c5:e9:54:90:19:f7:c4:57:bb:f2:b1:30:b8:87:
                    91:93:f1:c7:f2:47:8f:02:b4:98:2d:98:f4:5a:59:
                    a2:41:c8:81:ae:17:de:ce:30:24:c8:a6:19:9a:57:
                    15:f6:8d:75:5d:f6:d8:a9:08:4d:04:dd:26:24:98:
                    9d:1f:b6:d3:fd:6d:fc:bf:58:ec:ff:3f:81:d0:c7:
                    7c:f7:2e:09:d8:6f:4d:a7:30:eb:57:27:bf:b5:f5:
                    d8:7b:3f:c8:5c:a9:1d:01:c5:48:17:9e:9a:dc:94:
                    d5:9e:26:c3:71:b0:e6:a1:66:1e:48:5d:f8:4e:db:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0C:89:D6:01:8D:CB:0E:2E:BF:79:FC:95:0D:C6:A6:F5:4C:80:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:65:c4:6f:57:e6:3b:0d:7a:70:f3:2e:8d:6d:43:6e:26:37:
         e3:bd:eb:cf:b0:d2:27:6b:a5:e2:80:36:9a:d3:25:11:62:6a:
         1c:fc:8f:b0:6e:cd:e4:94:21:7e:89:df:e4:6c:bd:95:01:79:
         d3:70:db:f7:28:8d:cf:11:b2:f5:c0:7a:ea:8b:2a:e5:e0:ce:
         da:ed:df:ac:ad:64:b8:5b:4a:4d:12:6f:52:92:4d:4a:36:10:
         5a:ab:72:ce:0c:02:30:7f:01:95:c7:e3:87:93:4a:b8:37:0f:
         8c:26:2a:63:25:3f:d2:ca:65:79:3f:1b:83:69:9d:ab:55:1d:
         2f:69:22:18:14:c2:33:09:ee:f0:eb:97:e7:99:22:78:bd:e8:
         a0:f8:18:de:56:5a:0f:28:83:e6:16:e5:80:96:4a:57:d0:b2:
         1c:a7:4d:ea:4f:df:ae:0a:f5:04:30:e1:8a:d4:06:b3:cb:c2:
         cf:01:d7:8f:64:2b:93:13:9c:93:c2:36:11:6a:74:5e:ea:af:
         bb:60:79:ab:ff:90:01:21:c3:33:79:15:55:43:19:ea:7f:8d:
         04:be:18:69:02:f3:ab:90:51:ea:00:8e:97:54:c5:fd:b0:1d:
         f5:72:81:97:60:a1:24:3b:67:7e:20:5e:aa:44:99:25:e4:22:
         d6:91:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:19 2025 by rpki-client