Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
File:                     d391bb51-4a6a-32a2-9219-49391be11d04.roa (raw, json)
Hash identifier:          sBtOsg+/FpEvn51VEPV+zPcKj7pr7670G6kBfYunphA=
Subject key identifier:   E8:F5:34:89:A6:B3:8C:7E:15:3A:9D:9F:96:C1:34:F7:1C:3C:1E:DD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BBE403EB73A66EEC0F0EE2EC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     20940
IP address blocks:        2001:418:1401:18::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3e:b7:3a:66:ee:c0:f0:ee:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=fcd53fac-9c97-4e5b-961c-46770615374d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:ff:27:ec:3b:47:a9:94:27:ed:81:d1:f7:
                    b4:e1:d7:e9:17:b5:72:22:38:2e:48:49:72:6a:44:
                    bd:ee:fb:89:d7:7f:b0:96:6e:7f:5d:ab:d6:68:4a:
                    cc:b4:66:c7:18:d0:c1:97:70:87:3f:34:66:7c:37:
                    0d:70:82:53:ea:6a:26:cb:d4:53:3e:55:45:5c:c1:
                    b7:0f:14:95:99:98:d6:86:bc:39:40:45:85:a4:74:
                    3a:2a:74:26:e9:d7:48:d7:56:f9:c9:50:3f:03:be:
                    e1:87:7b:f0:ed:bd:8b:3c:5e:a4:6a:24:42:54:a2:
                    1b:df:5c:3f:74:b6:83:79:da:3a:ac:5c:cb:7f:5b:
                    bd:42:13:a7:60:c0:fd:71:37:f0:f5:78:0e:16:0f:
                    a8:3e:06:78:68:30:a1:d1:01:eb:d4:ac:df:b4:d0:
                    dc:a8:40:58:84:f6:ec:84:1e:03:31:a1:07:37:d6:
                    46:cc:ab:76:f1:4f:61:85:68:7c:8a:35:2b:02:02:
                    c8:bf:7c:10:f6:fe:83:77:56:54:24:50:e0:16:c2:
                    5b:61:ef:cc:68:80:f1:64:20:33:e3:b5:78:d3:de:
                    a4:e0:75:c2:e4:3c:63:94:16:69:93:35:13:b2:1a:
                    fd:dc:b3:1a:04:45:7a:81:d3:de:b1:0c:79:20:35:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F5:34:89:A6:B3:8C:7E:15:3A:9D:9F:96:C1:34:F7:1C:3C:1E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:18::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:a1:b5:ad:f2:b4:dd:f0:2e:b6:d9:25:81:0c:d6:3b:11:
         96:dc:dc:ce:6f:92:ef:0b:15:a7:50:eb:a8:71:56:66:bc:65:
         90:08:e4:ca:45:33:4f:78:de:56:ae:bc:df:23:96:50:84:34:
         5e:b1:0e:cb:ad:12:6a:23:21:55:b2:c4:d1:f0:33:20:f9:72:
         72:77:01:b6:a5:d5:94:8f:bf:64:a9:9f:5e:ba:b3:a6:d8:54:
         0b:78:eb:3e:08:d7:b3:56:30:1a:c9:a2:98:77:07:1c:3f:87:
         50:8d:19:70:1c:46:5b:25:48:c3:77:68:e5:ec:2d:dc:69:28:
         8a:33:83:11:80:92:55:3c:ff:54:5c:6b:76:77:24:5e:d3:6a:
         f3:15:20:ec:2a:58:47:6e:bc:e6:c9:59:f1:ce:f0:42:14:c8:
         ef:0f:46:d1:06:d5:57:be:c4:7b:23:ce:38:43:8a:9c:c3:b8:
         1e:99:0e:f6:9e:3b:bc:0d:f9:b1:a7:fa:0f:31:ad:fa:f9:86:
         e5:bc:4c:48:b7:04:72:3b:5e:52:91:89:11:f9:85:a0:fd:a5:
         aa:1d:b9:65:96:df:f5:14:71:9a:e1:5f:ed:dd:36:dd:c5:0b:
         8a:c8:dc:5a:d4:9e:50:42:42:e9:11:27:79:06:41:35:62:c0:
         b3:6a:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:23:17 2025 by rpki-client