Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0a27c85e-969e-3d81-b4f6-2ca42ebf48d5.roa
File:                     0a27c85e-969e-3d81-b4f6-2ca42ebf48d5.roa (raw, json)
Hash identifier:          tmBu661kSZCqTCj0UDTMOTJGFrZoydz3vlUmhWeBFJc=
Subject key identifier:   AF:EE:4D:10:5A:59:A0:DB:D4:0F:8D:2B:6C:1D:CC:89:4D:2E:CD:48
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584BB02CFF7718B164D372F72D00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0a27c85e-969e-3d81-b4f6-2ca42ebf48d5.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     271
IP address blocks:        2607:f8f0:1200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:ff:77:18:b1:64:d3:72:f7:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=c1220be3-3b37-4698-89c5-38a6e89ae29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:19:77:09:27:6e:59:26:f3:e7:42:0c:2e:
                    46:00:0e:f2:ed:a3:0d:c1:c5:22:c6:f6:4b:81:de:
                    61:04:e0:aa:cd:83:a9:8e:8d:13:83:8c:18:04:97:
                    26:f0:ad:93:f3:f2:1b:34:e1:b5:b9:4d:da:5b:f6:
                    77:6a:1a:d7:69:e0:41:23:ec:7b:6d:83:93:33:06:
                    b9:ea:e5:6e:54:8a:ff:ba:e1:79:9f:36:58:e2:fc:
                    9f:18:d8:6f:6d:88:98:bd:ca:52:d8:f3:7e:dc:43:
                    38:8b:db:34:4a:52:75:1a:23:22:cd:68:b3:7a:cf:
                    c2:f3:a2:20:d2:8e:31:4e:e7:f7:8f:6c:9c:0c:5f:
                    bd:20:b0:b6:a8:82:14:1e:22:41:c4:85:dd:a8:b0:
                    2d:57:ac:12:7e:e8:38:0c:84:4a:0f:8c:0c:19:8d:
                    86:1a:84:4c:f5:a3:f1:1a:73:1b:d5:72:7c:db:00:
                    50:17:17:d1:56:6d:54:07:91:2a:6e:b1:66:59:73:
                    b1:00:5c:49:fc:c3:5a:d5:9b:94:20:f9:ff:1a:22:
                    c1:6b:54:41:66:bd:b9:98:9d:8f:81:ab:00:2d:b7:
                    6b:cb:e0:7c:c1:b5:e4:ad:3a:1e:09:26:a6:7c:d6:
                    ea:f7:c2:75:ba:0e:a5:8e:ad:b4:32:18:a7:62:25:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EE:4D:10:5A:59:A0:DB:D4:0F:8D:2B:6C:1D:CC:89:4D:2E:CD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0a27c85e-969e-3d81-b4f6-2ca42ebf48d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:44:f3:e4:c4:2c:b9:98:47:5d:6e:49:58:12:7b:d1:f7:b1:
         9c:6b:84:50:a2:49:87:c9:ef:32:12:18:40:88:b7:f9:b9:d9:
         03:a5:f7:46:24:28:6b:f0:a9:8b:22:2d:e6:90:cc:a7:02:d5:
         30:56:8e:05:84:32:59:4f:eb:f6:64:9c:3a:42:bb:69:60:1e:
         ba:3d:c6:1b:c1:66:7b:c6:32:1b:4a:f4:33:08:df:a1:45:64:
         4c:43:a0:96:f2:ef:cc:c0:8d:da:55:5a:57:6e:d9:74:90:0a:
         11:b2:81:35:a8:85:63:61:2b:8b:af:5d:fd:8c:02:eb:bb:ad:
         39:a3:a2:ce:2a:f4:5a:ef:8e:5a:67:12:bd:89:d7:ab:a9:eb:
         77:a9:0d:ec:b8:61:4f:7d:4f:05:e3:f9:01:43:64:a8:55:86:
         d0:ca:39:fd:67:de:0f:2e:c7:24:38:8c:f8:e3:79:d5:3f:d6:
         8f:64:62:1c:37:9c:26:a0:4c:f5:64:ec:fc:cb:f9:4e:3c:fa:
         1b:f4:21:6c:bb:44:45:92:0a:f5:d3:39:53:14:73:af:a7:7a:
         53:fb:8d:dd:f7:6f:64:d3:5e:4e:c3:15:31:a9:13:5e:72:5e:
         03:d1:1e:7d:0a:28:e5:d7:9d:8a:66:99:b5:66:48:2c:07:eb:
         a2:b2:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:38 2025 by rpki-client