Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/0615e17a-bfa3-3f78-a031-1bef7687af45.roa
File:                     0615e17a-bfa3-3f78-a031-1bef7687af45.roa (raw, json)
Hash identifier:          0B23MA1HGcqEGFVC0dE3aLOpNsgtz2Llxsr3CT4/mWQ=
Subject key identifier:   5F:F2:21:5D:68:E2:AF:A8:90:3F:4A:B6:31:85:25:E9:56:19:91:AA
Certificate issuer:       /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
Certificate serial:       010D0C9F4328584B970CD7036C7384C19D5BD488
Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/0615e17a-bfa3-3f78-a031-1bef7687af45.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        2607:6100:a4::/48 maxlen: 48
                          2607:6100:a5::/48 maxlen: 48
                          2607:6100:a6::/48 maxlen: 48
                          2607:6100:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d7:03:6c:73:84:c1:9d:5b:d4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=72827248-981f-4f7a-bb1d-de785c46b421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:53:40:60:b2:ce:09:71:c7:85:aa:e9:7d:
                    7a:23:2c:54:dd:a7:69:fe:77:e1:ec:36:85:41:4b:
                    17:ea:7f:68:22:d7:26:73:57:23:d4:d1:17:50:98:
                    a1:ed:43:35:03:67:3d:11:6b:19:78:00:00:6c:5f:
                    0a:fd:a7:cd:e3:99:cc:d2:7f:71:6c:41:e7:dd:d7:
                    36:c1:b2:0c:c1:c5:a2:cc:c5:f0:25:31:69:d3:1f:
                    31:b6:37:ff:b0:ab:de:1f:e7:2c:55:90:1e:76:b9:
                    af:22:b2:af:04:f0:1a:b6:5a:ba:62:cd:0c:16:fb:
                    d4:a2:0b:66:0d:2b:57:a3:56:04:11:93:91:1a:08:
                    36:5f:98:48:56:85:32:18:8e:b1:94:bf:56:da:7a:
                    6b:83:82:fd:89:b7:15:6b:8d:2b:0f:ea:84:d7:7d:
                    fe:d1:8c:e6:54:ff:53:c1:8b:21:d7:a8:af:e3:2f:
                    d4:b2:ea:85:48:69:42:51:2b:09:64:87:6a:56:45:
                    24:a6:0b:18:26:c7:e0:71:dd:37:36:3e:07:43:75:
                    a6:2a:db:ac:54:58:41:51:ce:ea:67:2f:11:a2:6f:
                    e1:95:9d:56:9d:98:3d:5a:cf:7d:c0:d8:98:58:a7:
                    a7:97:b4:14:5e:39:66:43:65:b4:1b:e0:3d:76:57:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F2:21:5D:68:E2:AF:A8:90:3F:4A:B6:31:85:25:E9:56:19:91:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/0615e17a-bfa3-3f78-a031-1bef7687af45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6100:a4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:be:8d:e1:9b:29:9e:5f:24:17:6d:c4:15:73:73:f6:ef:
         8e:00:51:d7:35:04:79:a2:bf:88:bd:2c:91:90:ef:91:a2:1d:
         85:51:05:54:5c:c9:a7:04:2c:84:50:8f:1b:0e:fe:fa:f2:2c:
         73:e9:cb:0a:43:d7:20:96:65:91:45:74:8f:b5:ce:ba:98:1b:
         d3:bc:35:f4:97:45:16:b7:5e:c5:2c:b8:42:bd:63:34:cf:db:
         1e:46:e1:8f:f8:8f:39:48:fc:27:b5:3c:6d:db:e5:f4:97:ac:
         af:e9:89:12:34:f0:55:62:07:97:aa:e5:5e:85:d2:72:cb:c2:
         30:9c:97:cd:a1:23:31:7c:4a:52:71:cc:4d:00:07:7e:ed:f2:
         c0:19:51:9d:d1:9a:92:99:55:a3:7a:0b:47:68:f1:cc:25:e7:
         f3:25:a9:5c:7a:66:ad:23:63:af:c3:f9:de:47:69:6b:00:fc:
         0f:7a:a4:dd:4e:75:71:23:08:00:68:a0:d0:42:62:e7:91:52:
         d8:22:14:38:d4:f1:c7:70:bd:45:fa:f6:8d:d8:a3:b0:65:ea:
         0c:f8:79:15:16:fc:97:58:f7:62:e9:68:c9:59:70:13:0a:f7:
         99:8e:02:ed:2d:18:5b:7a:c4:54:b1:3b:81:07:f0:86:8b:13:
         f7:05:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:36 2025 by rpki-client