Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa
File:                     e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa (raw, json)
Hash identifier:          q9mUvTMlrV+Zvx1xw+wIEUrd5kkbaAusmRyPsprYRvQ=
Subject key identifier:   30:22:61:4B:B0:2D:76:BC:1A:CF:53:8F:BC:56:4F:AD:94:0D:55:23
Certificate issuer:       /CN=3e08da12-c2b8-4581-b1af-e8322645d15e
Certificate serial:       010D0C9F4328584BA0D263B11BBA637053B15040
Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     398448
IP address blocks:        2607:a340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:63:b1:1b:ba:63:70:53:b1:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=c7829351-aaa4-4a3e-a9c7-6b37fd3fb08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:0e:90:aa:d1:62:25:68:37:e5:e7:71:9a:
                    8e:0e:78:13:b7:73:3f:6f:58:ef:88:28:a2:ce:1c:
                    99:c1:20:93:41:78:61:ef:0d:c6:ab:64:e1:77:ae:
                    a9:c5:ff:f8:7b:81:e3:ac:01:eb:89:bd:3e:e9:54:
                    89:cd:77:7c:3b:40:91:dd:7a:5c:65:dd:ae:3b:bc:
                    7c:65:46:66:e8:47:29:86:af:d9:1c:d7:33:03:8e:
                    f1:8c:62:84:17:b2:79:01:f0:d0:14:d0:97:1d:48:
                    a7:36:67:b6:17:11:ee:cf:72:ec:1f:78:9d:bf:ae:
                    01:33:74:d0:e3:d5:e2:d0:f1:8c:e8:aa:73:2e:a6:
                    8e:1f:93:d1:71:29:77:14:50:14:86:b5:ad:54:11:
                    be:31:46:bb:18:c6:c3:c4:3a:15:44:f3:1f:a2:4b:
                    26:3f:30:47:db:e9:fc:3e:fb:f8:e6:6b:d9:78:00:
                    b4:24:3a:7e:37:0e:f3:fd:a3:09:d0:dd:98:f2:2c:
                    4d:78:b1:49:7d:2d:31:0a:4f:62:2a:d1:9d:ae:b8:
                    0c:97:31:9b:1a:c8:2e:2c:3c:9c:d0:00:15:65:a3:
                    92:c9:1b:1e:68:ab:e7:0a:b3:d9:ae:33:a3:7d:9b:
                    87:0d:7a:b5:f0:10:eb:90:bb:23:93:e6:bc:0c:22:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:61:4B:B0:2D:76:BC:1A:CF:53:8F:BC:56:4F:AD:94:0D:55:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:68:74:ee:a9:fb:45:03:5d:10:69:8f:f4:d0:0e:2b:cc:93:
         55:ef:b9:d1:4e:7f:40:72:55:a8:d9:c5:99:d4:d5:62:aa:38:
         6a:fd:65:28:54:00:f4:40:c3:5c:5a:6e:88:88:d3:4a:ba:44:
         d4:b2:d5:87:fb:b5:04:5c:07:db:28:45:3f:ff:fa:6a:86:66:
         bc:af:ea:ff:cf:3d:2e:0b:46:e9:6c:12:5d:95:9f:09:54:f6:
         3d:f9:83:c2:f7:a1:0a:bc:4b:13:20:33:86:a4:2a:75:d9:29:
         2a:1d:7a:bc:88:0d:a9:d4:c3:30:8e:ae:36:1a:03:13:29:68:
         c5:cc:6b:d7:a7:53:47:f8:53:ae:67:ca:74:b1:7f:0d:71:56:
         f3:ff:ca:05:2c:60:71:86:d1:00:ab:26:a1:7e:ba:77:9d:d8:
         c2:f8:ef:e5:54:76:ca:9b:11:bc:79:c0:be:a5:35:c2:85:c8:
         9f:c4:b9:52:a1:22:61:2e:43:83:1f:01:7e:2a:54:b7:5a:f2:
         57:72:9d:0d:5e:b4:bf:94:fb:17:76:f1:78:4e:fb:a4:8f:a6:
         61:84:01:f5:84:c9:b1:cc:5a:ae:e2:84:b3:80:3a:f1:6d:4d:
         93:06:c9:8f:37:86:ab:08:f1:aa:4c:1a:98:d2:cd:e6:2f:67:
         d5:be:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:52:52 2025 by rpki-client