Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
File:                     38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa (raw, json)
Hash identifier:          sBMSeSq60yyp3Nj4vJVJt1W/rLguLL6iitJxYrp1PZk=
Subject key identifier:   93:00:57:68:B0:B2:89:25:9B:E5:27:DB:19:8E:C3:23:5B:DB:7E:7F
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584BBB7595A1D35BF29AEE7E3E80
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     62563
IP address blocks:        2607:a140:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:95:a1:d3:5b:f2:9a:ee:7e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=8c03c064-e72f-4ddb-b496-be6164691059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:97:a9:82:81:71:82:c7:99:a4:5b:9f:58:
                    78:59:94:2e:c6:ed:e2:f1:bf:e9:74:9c:83:52:42:
                    e7:7e:b3:29:77:fd:9a:ef:54:2b:45:94:bd:5b:f8:
                    89:b2:09:6d:0b:88:92:e7:62:00:88:18:fa:cb:42:
                    d7:f2:94:f7:5a:6b:f7:a0:e7:e1:38:4d:a0:cd:97:
                    2a:a7:3d:08:27:7e:46:fa:00:32:45:a6:94:5f:1d:
                    b3:e2:bf:a1:96:3f:e9:ff:3f:47:45:f9:20:17:50:
                    02:25:2c:ad:5f:70:ff:ee:16:f1:8d:7c:10:27:eb:
                    ab:00:62:66:77:3b:c9:fb:6e:2f:1b:f3:c3:2e:fb:
                    03:16:91:7b:4e:15:0c:46:8a:d2:b3:e1:c9:23:c0:
                    23:0a:bd:e6:b1:9b:51:22:13:36:f9:e9:6d:da:f6:
                    26:9d:11:36:ed:0d:dc:ff:b5:fe:c8:b0:e5:ab:a0:
                    c0:90:d7:96:26:ac:2c:d9:15:a4:a5:0c:e8:eb:5a:
                    f6:44:19:18:43:d1:a8:23:82:2b:3f:66:d9:df:cf:
                    6e:c8:ec:53:fe:84:13:71:89:fe:23:89:10:d9:4c:
                    79:40:cf:3d:50:96:35:cf:7c:b6:4b:5d:13:73:de:
                    a0:74:3d:ae:55:9b:bd:dd:2c:df:90:67:94:86:93:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:57:68:B0:B2:89:25:9B:E5:27:DB:19:8E:C3:23:5B:DB:7E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:62:1d:a6:a0:b5:06:25:5e:c8:bd:ae:be:cb:b1:e8:95:01:
         3e:68:4d:2f:41:09:4f:30:dd:97:c4:31:df:c4:bc:90:57:95:
         5d:c8:26:aa:ce:00:87:07:c4:d4:57:5f:3f:2b:53:cd:ff:6d:
         a1:59:ca:33:bc:1a:f5:b7:4f:80:02:b4:c9:a8:f6:74:18:c8:
         2a:52:84:c7:84:de:cd:89:5f:e5:46:16:60:ed:56:1d:e1:2f:
         49:1b:44:2d:05:a5:eb:81:7e:86:33:cc:d1:d9:e5:96:5f:aa:
         23:ed:7e:ce:0d:29:53:2f:41:e2:2d:b4:9c:06:76:06:4f:a1:
         b4:32:da:fb:35:80:65:98:3b:17:90:55:0d:89:1e:ef:77:6a:
         e1:3f:75:f9:d6:23:13:ac:fa:5d:59:0e:b7:19:ca:e7:93:c1:
         06:67:2e:b6:8c:ad:19:31:11:dc:25:79:f4:9e:ab:ee:09:07:
         f7:42:4b:71:2b:b1:4c:bb:cd:60:f2:9d:f0:71:ef:22:3c:b5:
         d0:80:76:77:b7:e8:0e:77:37:e1:f5:9a:31:e3:bc:e7:17:7a:
         96:41:44:08:d3:f4:c5:c4:52:b4:a7:35:55:1a:8e:84:02:40:
         6a:0e:6e:fd:5b:e0:20:75:5a:99:c6:45:bc:ff:cb:bc:a8:8f:
         6d:1b:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:52 2025 by rpki-client