Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa
File:                     c76cf674-7ae1-309b-b202-b2e206711325.roa (raw, json)
Hash identifier:          shcjSup8qll73scCjhz2h0GRMIdDN0AtnbzV4Akt4Ts=
Subject key identifier:   89:36:B5:0F:24:E4:5F:3E:FA:E3:63:DF:60:9F:97:AB:95:9E:78:0C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584B970CF331BDEA29D90C3DB280
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     59253
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f3:31:bd:ea:29:d9:0c:3d:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=4fc9e8d7-5e61-4a8a-abd8-de15e325c81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:d4:0b:91:22:10:84:21:ea:d0:2b:4c:68:
                    f6:1b:99:f9:f1:4f:cb:95:22:a9:0c:2a:5f:be:ab:
                    51:b7:7a:78:13:13:54:8d:dd:c8:03:53:c5:97:1b:
                    aa:63:f6:45:f9:83:8a:8f:26:3d:fc:5f:6d:4b:77:
                    85:b2:d5:fc:75:32:77:b3:1c:4e:1d:75:1f:c4:63:
                    6f:52:e4:94:8a:0a:89:b2:4b:22:fe:5d:a5:57:ed:
                    8e:30:cb:32:8e:9b:8b:7f:c1:88:0e:49:71:f8:b0:
                    c9:80:64:3b:59:66:bf:3e:0f:f4:0e:68:7b:8e:50:
                    4c:70:23:9f:73:d3:cb:8f:21:e2:d8:ca:e2:3b:55:
                    6f:c4:66:97:2d:ce:3d:20:a0:15:03:e3:de:d6:de:
                    ca:d0:64:61:60:d3:68:f3:ff:71:6e:e2:e0:71:b1:
                    17:fb:b4:11:d8:09:03:b7:ec:04:09:3f:87:75:26:
                    f1:22:59:1e:75:fc:bc:95:76:9e:43:ed:1b:9b:44:
                    49:6a:cb:a6:5f:22:80:89:78:0f:58:28:48:3a:77:
                    59:01:98:3b:d0:a5:72:f9:14:4a:63:39:38:8e:7e:
                    d9:85:16:47:55:b4:32:08:ed:35:85:61:bc:35:52:
                    c9:36:5a:66:27:bb:69:57:f6:4b:11:69:b5:c6:37:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:36:B5:0F:24:E4:5F:3E:FA:E3:63:DF:60:9F:97:AB:95:9E:78:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:5c:35:1a:65:df:93:3b:32:6f:f3:a8:66:e7:bf:82:b6:
         8f:9a:ac:25:6c:8a:36:b9:b0:1b:64:8a:6c:6b:b3:3b:76:6a:
         b0:5d:42:1e:a6:7a:71:20:38:d0:8e:98:1a:ce:05:7a:62:18:
         b6:39:e6:93:5b:e5:88:89:02:64:a2:d4:38:80:0c:46:e1:4a:
         94:fe:45:ec:e2:d5:07:59:ef:49:13:38:12:af:8a:7f:72:69:
         94:68:5c:c2:5f:12:fe:00:79:c1:ee:ef:b9:12:b2:63:93:65:
         c0:c8:54:07:b9:3c:fc:a0:d1:17:fa:68:09:a6:2e:30:1d:ff:
         73:34:c9:44:11:f2:ca:7f:12:45:d0:03:e2:68:aa:74:e8:89:
         27:39:97:0a:ad:f9:f3:35:36:08:e8:be:b8:b2:c6:f8:3c:bb:
         ba:79:28:27:de:38:84:d1:c5:9d:28:25:78:9c:b9:6e:4d:5b:
         88:d7:5e:84:18:aa:f6:06:97:56:63:85:e9:69:3d:25:27:50:
         d6:14:82:bf:a3:f1:17:df:20:dd:9f:0d:aa:3f:97:58:fe:c1:
         3d:8d:af:3d:c8:be:25:cb:5f:ae:fc:09:47:aa:c2:3c:59:69:
         61:dc:31:4d:f1:91:a1:01:15:a9:19:6e:d0:b1:b2:fe:b5:49:
         11:a7:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:15:25 2025 by rpki-client