Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fe283c9-95f7-33eb-844c-56ba0c0e74e0.roa
File:                     8fe283c9-95f7-33eb-844c-56ba0c0e74e0.roa (raw, json)
Hash identifier:          ATqD1tHCkZ8bwYCfdyTGxkgxgqChfSLzXO1c1S5uYFY=
Subject key identifier:   E7:FA:B6:60:9E:8A:E1:2F:66:E8:D7:6E:7F:3E:53:2C:21:32:93:62
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0CB62413B2B136A65980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fe283c9-95f7-33eb-844c-56ba0c0e74e0.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        2605:4300:e500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:0c:b6:24:13:b2:b1:36:a6:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=af40d861-49cc-4a75-bfc9-cecc859db231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:95:1f:34:4c:19:8a:53:09:0c:60:bf:a4:
                    43:6b:d6:a7:c5:49:d1:e2:95:4f:16:0e:44:ed:dc:
                    7a:44:9e:b7:cb:45:4e:ae:ca:46:d4:38:05:68:6d:
                    ed:c0:09:f1:15:7f:fb:e7:cf:68:c1:9d:58:b6:7f:
                    d2:30:d7:f2:4a:6f:c0:7f:83:de:80:a9:8d:47:31:
                    f6:66:38:9b:1d:fd:ef:cb:f0:97:17:09:59:51:4b:
                    a4:4e:15:ba:c5:13:62:31:c2:12:ce:bc:a8:7a:a7:
                    1b:12:5d:dc:34:eb:6a:de:f8:94:bb:7f:95:87:84:
                    a1:52:04:f7:a1:47:3a:76:62:d9:8e:09:c3:6a:84:
                    18:51:79:b7:8a:ae:46:ac:80:28:47:b1:9d:ed:9f:
                    5c:cf:7e:79:2b:6e:a4:bf:2b:f4:f6:be:df:61:ba:
                    c7:8f:14:32:eb:99:d6:56:d3:c8:24:99:39:38:98:
                    b8:be:5d:86:28:ae:84:3c:ca:65:aa:92:04:01:d6:
                    24:2e:37:fc:23:df:af:63:73:82:bf:fd:1f:40:ae:
                    95:04:cb:cb:45:73:05:d6:92:c8:cb:be:09:c0:a9:
                    d5:d4:31:50:1e:ff:84:72:e7:db:89:05:31:9e:69:
                    af:77:34:dd:93:70:cd:0c:7a:90:48:4e:6e:f5:f8:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FA:B6:60:9E:8A:E1:2F:66:E8:D7:6E:7F:3E:53:2C:21:32:93:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fe283c9-95f7-33eb-844c-56ba0c0e74e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:11:ee:ad:6b:36:ca:c3:f1:ee:0f:5d:e4:7c:25:07:80:
         c3:53:af:19:76:7d:8e:c5:8a:4a:c5:f9:06:5c:1d:b5:5c:97:
         38:ba:8c:cf:13:5e:3e:ca:3e:5f:d7:b9:c4:05:05:96:f2:01:
         2e:44:34:41:50:cf:d5:61:7f:a3:0b:35:4f:a1:5c:3a:bd:2a:
         41:b9:9d:1d:92:d0:a8:51:5c:1f:24:b5:9c:6d:6c:2f:c6:7f:
         ff:3b:45:c6:75:f3:41:70:03:c2:c6:c4:fd:96:2a:8f:9c:d4:
         01:f1:ee:59:09:6a:d4:dd:84:95:ba:38:cf:37:09:a8:ff:ba:
         18:73:d5:ea:37:2b:da:f6:26:7d:60:eb:34:61:c7:27:f5:67:
         11:40:98:40:3e:f0:52:d9:a1:52:24:88:82:db:e1:ca:1b:22:
         28:b0:8d:b4:a6:0b:34:d1:58:98:26:bb:24:53:81:bc:8d:3b:
         1b:21:86:ed:2f:15:2c:e2:03:c7:35:d5:b8:ec:bd:3f:5b:ab:
         9d:40:7e:15:5b:54:77:46:1a:8b:ea:af:57:58:32:33:e9:d7:
         18:1f:87:5c:dd:23:c4:98:0e:a0:99:36:0f:63:76:fa:f1:47:
         d7:f5:e5:ae:76:b7:bc:8f:6f:98:2b:f0:1f:7b:45:12:b4:6d:
         1f:fd:37:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:45:07 2025 by rpki-client