Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02de145b-30cb-3d75-8083-6b8cebab2efd.roa
File:                     02de145b-30cb-3d75-8083-6b8cebab2efd.roa (raw, json)
Hash identifier:          FhlY190sBnybKgItD5p+vCJBFXtAzh0uq6UuKJWCOhw=
Subject key identifier:   0B:61:7E:6B:86:0D:B0:80:52:77:A9:3A:6C:0D:06:37:F5:F4:C1:F2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10AFCA9710373CBE367F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02de145b-30cb-3d75-8083-6b8cebab2efd.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        2601:cd::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:fc:a9:71:03:73:cb:e3:67:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=3f2d453d-9d90-467c-bf73-96afb8c05338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:66:ca:7c:49:75:bd:57:05:e5:5a:f9:bd:
                    d9:f4:66:9e:2c:9c:2f:66:7f:48:f2:04:ce:21:c2:
                    5f:eb:64:bc:6e:3f:80:9b:19:bb:69:a3:50:14:af:
                    71:db:9e:c5:16:2a:65:88:4a:e8:ae:f8:fc:4f:31:
                    f2:d3:94:02:94:76:b7:64:e3:a4:8b:a3:a2:c2:77:
                    5a:64:07:2c:a5:01:80:9f:a2:b7:af:23:af:36:c6:
                    02:19:e0:d3:17:9c:b5:65:9f:1c:5a:ac:08:e3:52:
                    49:30:38:a2:ba:7a:8d:b6:ae:f6:50:7c:db:31:f2:
                    02:9c:91:9d:d7:09:44:cc:bf:36:f4:b2:ec:f3:a5:
                    20:6e:54:fb:4a:56:63:8b:38:98:9c:ea:88:0a:f4:
                    34:21:60:87:e4:92:80:39:bf:40:fb:4d:38:3c:61:
                    74:a1:8e:9a:4f:2e:90:c6:b5:f8:62:c3:01:d0:ed:
                    57:05:fd:66:ac:ce:4f:04:17:89:71:4a:5c:8a:22:
                    9f:1e:76:f7:49:c5:b9:18:ae:20:c7:69:d5:7d:5f:
                    d8:d4:47:3d:c3:ab:ac:3d:a2:95:de:a0:e6:e7:a3:
                    74:e7:70:61:bf:38:24:cd:e7:7a:bf:ca:50:3a:74:
                    97:bc:09:84:db:12:04:76:15:35:83:d3:c3:aa:5e:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:61:7E:6B:86:0D:B0:80:52:77:A9:3A:6C:0D:06:37:F5:F4:C1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02de145b-30cb-3d75-8083-6b8cebab2efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:cd::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:53:fa:aa:b7:89:02:71:05:d7:da:b9:36:f1:0b:af:86:3a:
         c8:9e:d7:08:fb:4b:4b:bb:9d:a6:80:45:10:a9:2b:a5:c5:bb:
         bc:52:e4:06:62:f9:46:fa:b4:70:71:b9:87:d4:99:9d:bd:92:
         90:01:98:52:de:33:ca:f3:c7:76:ff:e3:57:7d:b7:12:be:5f:
         e9:de:b1:af:48:bd:f4:60:01:fd:60:b7:97:41:16:ca:5d:f5:
         78:17:40:17:03:cf:c0:a5:d3:3a:0e:84:4e:16:80:15:6a:da:
         ae:77:f5:03:66:82:f2:c3:da:f6:23:15:b3:81:19:27:07:f2:
         30:f3:bf:f9:0b:96:70:82:61:b0:a3:35:70:e6:49:a5:e8:ec:
         95:53:d9:41:5a:27:dd:72:8f:d2:44:98:18:ba:7f:d1:ba:c8:
         f7:55:87:01:78:b5:57:bd:85:78:df:41:75:6d:f3:f8:21:e9:
         f8:0b:76:5b:d5:eb:1c:0f:31:d4:d4:c4:ae:1c:66:ee:46:aa:
         ab:64:87:dd:95:82:a1:1c:87:0b:f4:92:19:22:a1:d3:38:0a:
         64:ea:0b:16:e8:03:65:ac:7e:c0:9b:2b:26:90:47:1e:00:48:
         b8:27:80:56:4d:cf:f4:17:c2:1a:d2:12:fc:98:d0:24:37:99:
         4c:45:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:32:16 2025 by rpki-client