Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
File:                     c4518de9-d056-34ce-80de-4fe9f545eb73.roa (raw, json)
Hash identifier:          xICtqT3fT5fM0/WVYTQjR2QfuXfH8kkLkfpOr7rFkFA=
Subject key identifier:   7A:78:B5:1F:FE:70:01:D4:B8:0A:25:43:9E:17:1A:41:63:E5:56:27
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F4328584B99D7A35709E91A1CC9E1D2C0
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     3152
IP address blocks:        2620:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a3:57:09:e9:1a:1c:c9:e1:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f862d052-3f3f-4f2f-8549-cdfd2ac1f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:fc:f4:a3:55:47:1d:5b:0f:cd:1a:7d:59:
                    af:b5:0b:ae:cf:36:fc:43:0e:6a:7b:25:4f:30:cb:
                    d9:b6:bc:42:91:4f:2d:30:9a:16:20:72:e8:0d:99:
                    17:74:f8:c8:f4:22:90:33:1e:57:b8:c5:0d:ad:98:
                    9c:dc:3a:f4:a7:3e:75:37:93:18:60:06:35:9b:cc:
                    03:92:c2:8a:58:7b:15:b4:19:8e:87:c6:e2:b7:bb:
                    49:53:37:0d:2d:77:72:ec:79:1d:47:c0:1f:bf:80:
                    d2:c9:bc:d2:7f:0d:95:6a:14:de:47:e7:32:c8:b9:
                    2d:8a:59:a5:39:54:32:06:49:d0:b9:d1:f9:ee:24:
                    26:68:21:08:46:21:c4:95:e3:5e:f5:b9:fd:10:f0:
                    06:50:62:1f:c0:05:53:c3:ad:10:df:b6:f8:c1:fd:
                    4a:4a:d9:8c:ed:2a:31:9d:b7:ff:1e:bb:a6:d9:6f:
                    a6:8d:ac:e4:15:73:ef:24:3c:bd:a5:db:d3:1e:42:
                    fc:51:15:47:b1:d8:79:ad:3c:9c:46:d6:56:c8:d1:
                    db:a8:76:3e:0e:35:73:66:b7:2d:0a:c4:5f:23:d4:
                    78:8a:38:a7:05:65:35:36:ea:98:03:8f:18:62:c8:
                    ea:3e:29:8b:08:ce:a4:3e:d7:47:bc:b0:f1:56:81:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:B5:1F:FE:70:01:D4:B8:0A:25:43:9E:17:1A:41:63:E5:56:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:ee:62:43:e5:4d:76:74:96:ce:f4:05:c8:09:f8:8c:08:
         c4:a4:6a:61:7c:35:b6:12:8e:b4:5c:7c:c5:2e:4d:4d:58:67:
         33:48:a3:03:32:12:79:cc:73:4c:97:7e:f2:82:4b:2c:12:3b:
         b0:8d:7e:f8:e9:b5:f3:63:d0:7b:ad:9f:bb:83:79:d2:66:f6:
         e6:8d:d3:c4:f8:a2:b0:c0:e9:10:19:f8:1c:1e:7d:4d:0d:33:
         50:a6:7a:ca:5e:56:88:cc:22:d8:a2:7e:34:a3:7d:35:fe:68:
         76:a4:fc:76:2d:31:df:2f:73:d4:61:66:80:93:9a:0b:73:fb:
         f8:8a:43:1c:59:ca:2c:72:9f:35:9d:ef:e0:d4:e2:ce:66:99:
         aa:e1:dd:74:7f:0c:25:ab:92:88:d4:5c:ec:e6:28:73:2b:5f:
         eb:ab:c1:ed:f8:4d:b2:1e:6e:12:63:9f:e0:4f:dd:b5:6d:4c:
         7b:5d:22:2d:12:be:88:cc:cd:6b:4e:96:36:5e:96:5a:55:a3:
         d1:17:59:ae:04:af:3f:55:33:b9:54:e0:07:5f:3e:fe:8c:bc:
         f0:7a:a8:53:67:53:a6:e0:d5:99:78:77:41:9f:44:c9:c8:b3:
         df:8a:04:5b:94:82:1c:48:85:1c:6e:a9:57:91:90:e2:b7:27:
         72:4a:af:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:44 2025 by rpki-client