Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa
File:                     8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa (raw, json)
Hash identifier:          SeDXMFyF0FYztYZN5qGV8NpUHqGDSR9uKa2E0EvfOZA=
Subject key identifier:   70:2A:30:AC:77:53:42:82:46:0A:3D:9F:15:CE:DA:4C:8E:F8:31:E1
Certificate issuer:       /CN=2b41a59d-bac0-456f-82a5-a12979543eff
Certificate serial:       010D0C9F4328584BA25940859AAC9FDF04D0A5C0
Authority key identifier: 72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa
Signing time:             Sat 25 Oct 2025 02:08:29 +0000
ROA not before:           Sat 25 Oct 2025 02:08:29 +0000
ROA not after:            Fri 23 Jan 2026 03:08:29 +0000
asID:                     20473
IP address blocks:        2602:f4fb:f00::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:59:40:85:9a:ac:9f:df:04:d0:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b41a59d-bac0-456f-82a5-a12979543eff
        Validity
            Not Before: Oct 25 02:08:29 2025 GMT
            Not After : Jan 23 03:08:29 2026 GMT
        Subject: CN=e06ac3c8-1933-41c8-a2d2-cc118d6cd828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:69:ab:4c:2b:28:5a:69:03:fd:0f:a7:5a:
                    2a:01:61:da:66:93:ad:2c:67:eb:f5:b6:16:43:04:
                    1d:66:1a:c7:af:6d:8d:73:c2:89:bd:cd:c2:2f:8f:
                    85:55:5d:85:b0:a6:70:b9:11:b1:65:f6:bf:4d:d9:
                    5f:41:08:15:47:a3:cf:d6:f5:1d:29:b2:a7:07:27:
                    60:b4:9b:bc:55:63:22:2e:25:68:b8:5a:43:8a:49:
                    8a:34:cb:a2:89:a5:85:d4:79:5d:01:dc:a7:33:e5:
                    7b:8a:53:78:a3:d7:92:7b:5f:47:80:f5:f9:de:3c:
                    9d:87:d9:07:98:fd:46:5f:9e:f2:dc:03:4c:dd:2d:
                    43:9e:d6:9f:94:4f:06:ad:7d:00:6e:b5:51:5e:83:
                    e6:2b:07:b3:5b:00:36:50:14:cd:d0:74:1d:62:60:
                    b4:cb:e8:0e:3a:79:a1:79:2a:7d:95:c2:ef:7c:37:
                    a5:e8:6d:2e:89:69:5f:25:15:66:8d:8d:13:7c:68:
                    70:42:f2:39:f7:1c:f5:85:2d:63:7a:da:67:8b:eb:
                    b6:95:2e:27:9a:8a:85:a2:dd:83:21:51:5f:a7:ca:
                    ec:e5:22:db:d1:f2:4b:4f:93:fb:87:8d:c7:9d:ef:
                    b7:b8:ff:5c:85:42:bc:3b:32:b1:1a:19:87:d6:40:
                    57:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2A:30:AC:77:53:42:82:46:0A:3D:9F:15:CE:DA:4C:8E:F8:31:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/8a1afd7a-1447-3c51-beb0-8d9328dfe7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff/2b41a59d-bac0-456f-82a5-a12979543eff.crl

            X509v3 Authority Key Identifier:
                keyid:72:1C:FF:5D:01:1A:AF:1F:93:3D:F6:3B:41:51:BC:44:79:9A:C7:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b41a59d-bac0-456f-82a5-a12979543eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4fb:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:3e:dc:89:d9:98:34:83:89:a8:c1:41:b4:55:07:7e:cc:
         8b:f2:06:b8:a4:e6:90:4a:10:a2:c6:a3:60:58:23:fa:e6:25:
         2c:d5:54:8a:b2:06:41:13:21:11:b0:4e:a2:51:69:4e:ae:36:
         2a:b2:38:f1:a2:e6:a3:a3:05:ad:5c:5a:23:12:c1:8b:ed:d9:
         aa:41:c5:4a:60:0a:80:3f:6b:97:d1:fd:2c:0a:e8:97:c5:45:
         28:30:a6:0c:fe:9e:00:d9:d0:6e:8b:9b:fc:b8:e5:dd:be:9e:
         38:f6:31:7b:f3:40:4e:f7:9e:20:12:72:03:9b:82:7b:64:8b:
         63:c3:25:ce:be:47:ae:81:60:51:5c:ea:e4:21:92:a0:6b:b2:
         16:9f:93:43:bb:ae:6f:c4:6d:05:90:53:c2:50:82:52:8f:3b:
         fe:62:f2:a4:7f:94:7f:57:df:25:bb:72:73:c2:9d:29:20:ea:
         02:bb:74:3b:62:fa:5a:4a:7c:b3:25:77:a7:87:44:4c:70:9c:
         a0:d9:c8:c7:20:e4:e7:58:d6:a6:d2:f4:aa:aa:65:aa:6a:1d:
         6e:4d:90:cb:91:21:2d:a1:8c:8c:93:11:93:e6:1e:cc:a1:df:
         64:a6:e3:40:86:0a:50:de:0e:58:09:a9:c9:9b:1b:b0:1e:b4:
         96:26:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:16 2025 by rpki-client