Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
File:                     8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa (raw, json)
Hash identifier:          R871ANL2bFyxSSLTJZUH8QYhfw2yInwY5ZIzPosM1tY=
Subject key identifier:   CB:96:57:A9:62:31:F3:6E:37:46:C9:E3:F0:BE:6C:D0:86:E9:A7:CE
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584BB2F7AD4221B74B22A2572640
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     20454
IP address blocks:        2607:fe80:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:ad:42:21:b7:4b:22:a2:57:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=d95a80f5-28b0-48fa-afb6-08a0568a1def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:e0:82:c0:a1:cc:ea:cb:5c:c4:dc:41:19:
                    d3:13:0a:27:99:1a:b5:55:a8:78:3c:ad:41:ef:89:
                    f8:92:5b:41:a4:5a:54:fc:68:94:59:c7:27:34:88:
                    f0:df:33:7e:6f:a6:08:a8:9e:de:de:2e:0b:4d:d6:
                    6e:e5:9f:92:b7:36:3e:b1:c2:64:e9:10:53:9c:69:
                    97:27:1c:24:06:b4:a0:9c:ed:b6:37:66:6b:7d:55:
                    91:82:0b:6c:54:25:1e:e2:b4:57:7d:15:80:0c:5a:
                    80:e7:24:ab:6a:95:11:6a:a7:50:64:d3:45:a7:2f:
                    47:8b:2e:68:7c:c9:09:e0:6b:42:bb:08:57:51:b5:
                    4e:95:b7:b5:91:80:8d:23:34:ca:72:a7:26:0a:39:
                    e3:7b:a5:e1:90:80:9e:0d:22:91:7f:c4:0e:52:07:
                    7a:dc:d3:ea:ac:0e:59:59:42:5f:dc:95:51:82:0f:
                    fa:8e:56:6b:a9:b6:a4:b2:9d:6e:87:73:a6:56:d9:
                    a9:cb:b2:a6:a9:5f:e5:87:88:3b:59:08:a3:0f:eb:
                    5e:c1:57:74:fb:ed:d1:5d:36:c2:7c:73:9f:bf:14:
                    20:17:1c:f4:e7:7e:c3:71:b9:ba:85:e3:69:95:16:
                    af:e7:b2:ff:5c:16:26:05:d6:18:61:65:0f:37:9c:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:96:57:A9:62:31:F3:6E:37:46:C9:E3:F0:BE:6C:D0:86:E9:A7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cc:8b:dd:cb:59:2f:5e:c3:87:ab:fe:e2:9c:2e:62:e9:ca:
         42:9a:6e:3d:2c:ca:21:10:f8:74:93:a3:be:41:78:7b:1d:67:
         ed:b1:33:f7:f8:20:ac:07:a3:34:82:33:52:aa:54:0d:d6:79:
         cd:20:22:1b:77:23:13:01:bd:e3:3d:4b:3e:6a:53:a8:2a:3c:
         b8:b6:79:04:32:32:78:a9:fc:0c:22:25:7f:34:97:36:4a:02:
         88:82:b9:db:d0:fb:0c:56:8f:c9:6b:33:79:7c:ed:0f:bb:56:
         f7:34:7c:77:87:08:65:ad:ae:df:47:6b:1b:5c:aa:59:b3:b6:
         74:b3:3f:43:5f:fd:9e:87:f7:3f:b0:d2:d3:c0:b1:40:84:4e:
         50:c0:73:41:65:8e:61:3b:65:28:a6:a9:38:30:4b:46:c4:6e:
         1f:97:41:89:5e:c5:f4:1a:95:7b:9f:e6:e2:a3:3b:0b:88:ba:
         db:a6:a7:1f:65:09:84:68:6d:82:b0:e1:19:48:17:79:2d:4a:
         e7:d5:35:61:eb:50:11:14:d5:40:4b:bc:9f:fd:e4:18:e2:28:
         d6:f4:16:7a:ae:1a:f2:a6:8f:9d:90:45:6d:8c:7f:73:35:1c:
         eb:59:59:54:b0:f9:9e:1a:c6:59:bb:3c:55:f3:67:d9:d4:8a:
         11:c5:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:34:04 2025 by rpki-client