Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0316968f-8480-3f80-8672-08766d804d52.roa
File:                     0316968f-8480-3f80-8672-08766d804d52.roa (raw, json)
Hash identifier:          dM7M9vxTqbR76Nuyl8XuyC8kh6sbB8uG0O2QhfAnhQc=
Subject key identifier:   64:1B:C9:51:3E:95:7F:33:A0:E3:F5:13:47:81:1C:5C:FC:17:79:2D
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584BB88D2BD3B717C5D5DA8032A0
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0316968f-8480-3f80-8672-08766d804d52.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     23347
IP address blocks:        2602:814:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2b:d3:b7:17:c5:d5:da:80:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=bfbeb286-650f-400c-afb5-4cc297841221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:68:82:29:24:c4:c0:51:b8:d3:e5:c5:85:
                    2a:00:2f:9e:72:32:a1:74:22:51:00:97:ff:a0:f2:
                    6f:1f:de:5f:1d:43:ca:eb:7f:fc:59:47:3e:1e:1c:
                    67:ec:ee:48:15:2c:80:0a:89:f1:31:63:74:7b:33:
                    0b:ec:f8:9b:43:65:e8:d6:56:74:c0:3a:6e:71:8f:
                    de:87:49:6c:e1:5c:36:b8:20:e6:9e:77:28:23:f3:
                    91:33:c5:c3:39:71:11:0f:d6:d3:62:de:31:dc:8e:
                    b8:a6:6e:d8:a4:03:b8:2c:74:76:76:eb:71:f3:07:
                    74:02:47:d8:b9:12:a2:cb:29:79:e3:3a:bf:d2:1a:
                    f3:36:73:e1:4d:c8:b0:4e:01:6a:35:d1:27:86:21:
                    9d:d4:0c:80:2c:94:6a:c9:00:02:12:1e:42:b8:e8:
                    50:ff:2b:e5:2f:71:4f:cf:ad:19:d7:7e:33:c9:da:
                    a0:cb:d9:ba:3c:28:4b:b5:16:66:30:40:23:7a:0d:
                    a2:5b:3a:68:80:96:1b:76:de:9f:88:1e:4d:e7:c6:
                    d0:28:51:8c:0a:dc:c4:06:25:9a:4b:cf:ca:00:31:
                    93:4c:ba:64:03:fc:b1:d6:e7:7e:08:be:9a:88:45:
                    09:8a:c1:37:71:c2:96:e0:72:8e:88:62:92:ab:e6:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:C9:51:3E:95:7F:33:A0:E3:F5:13:47:81:1C:5C:FC:17:79:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/0316968f-8480-3f80-8672-08766d804d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:94:d1:3c:78:fa:21:7f:53:78:bf:14:34:5d:3c:d4:92:
         33:03:bb:d5:50:69:84:a8:d0:c0:67:22:75:c0:ef:80:a1:15:
         14:38:f3:69:70:55:aa:2d:08:8b:c6:d5:15:8d:9f:05:4e:8c:
         c6:cb:bf:fe:d4:08:ed:66:a3:48:7a:9b:29:f8:84:49:47:a7:
         97:c7:20:17:6f:48:cb:52:c5:1f:92:0a:58:d0:a3:22:1b:34:
         74:9e:28:16:61:32:b3:7a:a6:6d:27:eb:b0:3c:fa:04:13:a7:
         11:b9:eb:39:19:36:df:db:04:75:28:d1:d1:9f:d0:99:88:ea:
         f6:1a:9d:51:2f:ac:e0:f1:f7:ab:e8:71:b8:2b:9c:c7:ea:89:
         57:74:f2:91:17:a1:e4:4e:c5:72:5c:b7:b5:d4:94:84:af:60:
         38:a4:52:e5:71:d5:ec:92:23:26:ac:1f:7e:b2:f7:a8:28:86:
         f0:bd:62:4c:eb:f1:28:4b:3e:b5:fc:78:9d:c2:99:b6:09:4d:
         5b:c8:56:2b:16:c5:02:a0:7c:7d:7e:79:96:6d:3d:b1:a1:40:
         e1:14:27:19:f7:29:b8:67:43:f3:e8:a9:fe:db:9e:d1:17:a2:
         3c:22:4d:b0:cd:40:88:69:b0:30:65:25:01:97:b7:56:cc:bf:
         37:4a:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:14:32 2025 by rpki-client