Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
File:                     9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa (raw, json)
Hash identifier:          aL39CSpfDTUqt6eDAtRDJTfwX+1p/Xw1BSoAv+ZCoUY=
Subject key identifier:   85:06:F8:B5:84:26:94:CA:81:45:C9:C6:FD:4D:A4:74:46:B2:18:24
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584BA39D203D00D04FE0AB80A980
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2620:113:8060::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:20:3d:00:d0:4f:e0:ab:80:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=2a62f92b-fba4-43f7-8d9b-790cbb48c151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:3f:db:62:37:54:34:69:99:64:6c:36:8f:
                    02:0e:26:00:c5:35:6c:7d:d7:da:7f:21:cb:43:5e:
                    91:75:44:c5:61:20:31:e3:55:8c:96:00:3c:77:eb:
                    58:74:08:8e:4a:19:fe:a1:11:27:ad:90:fb:a2:b7:
                    bf:61:fe:b9:65:26:b4:e4:19:c3:cc:b5:14:ec:fc:
                    d2:98:43:a8:32:6b:3c:76:72:ea:2a:26:d4:32:a7:
                    16:cb:b6:a5:dd:6e:fb:c5:16:4f:d9:8e:b8:3c:98:
                    27:17:ae:87:d1:15:00:5a:a0:7d:c0:f8:bd:aa:9d:
                    5c:ba:78:d0:91:96:dc:20:eb:47:80:ed:e4:da:0f:
                    2a:83:5c:5e:6b:fa:95:05:f6:b4:bb:90:dc:69:dc:
                    8e:8f:03:95:56:a1:06:43:b5:eb:75:72:5e:0d:e4:
                    af:0b:ed:02:8d:3c:09:81:9c:cb:8f:a9:25:48:48:
                    bf:91:7e:17:5e:19:3c:36:8d:54:86:55:f7:b6:0b:
                    63:46:5b:76:a0:22:b6:84:41:3a:fc:de:40:7f:ab:
                    e3:e8:77:d7:da:74:1d:3b:cd:82:31:53:90:4d:d0:
                    45:f2:7e:a8:89:99:9b:c4:82:a7:98:5b:f7:b9:68:
                    d5:1a:06:b6:4e:3e:6b:1f:58:36:2b:b4:60:03:f5:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:06:F8:B5:84:26:94:CA:81:45:C9:C6:FD:4D:A4:74:46:B2:18:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/9dfb13b6-e8dd-3b63-b695-6201c69b7f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:8060::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:d5:91:7e:2e:ab:4e:24:3a:d4:f1:de:56:c2:25:60:b2:
         9e:ec:67:b3:d5:6f:f0:3f:d4:3c:dc:2b:fd:c6:00:3d:20:aa:
         3b:4e:68:27:98:a3:da:18:aa:ed:b0:42:77:d2:81:55:3e:c8:
         e9:d3:f9:99:37:21:ea:25:aa:01:02:97:bc:b1:7c:9f:ef:2c:
         43:16:7e:84:76:21:d7:fb:f8:3d:bb:2d:a9:ac:d8:b8:62:09:
         f6:ff:e8:27:7e:9a:c8:ee:f4:64:21:ff:25:16:56:67:09:c4:
         84:61:98:69:e8:a8:8c:57:72:b3:77:ae:bf:51:8a:40:c8:b1:
         2e:7c:d8:9d:de:80:4d:bf:ab:ad:e7:e8:47:b9:bc:2a:eb:7f:
         df:c5:19:c2:61:af:f0:b6:a4:bc:db:87:23:a1:6c:d0:f3:1f:
         2d:6b:ce:4d:c3:8d:2a:4a:ef:17:50:8a:41:46:02:95:08:34:
         0f:a2:c1:1a:43:0a:5b:9d:2e:0d:86:b0:24:3c:47:54:5c:5f:
         49:ab:4e:4e:b1:82:2e:27:b1:6d:f2:18:32:76:43:0a:87:26:
         08:6d:07:07:65:78:95:e9:0f:da:66:79:99:97:b7:ed:56:21:
         6c:f3:87:19:76:21:58:1d:53:de:e4:a8:23:b9:61:97:93:0a:
         e9:db:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:36 2025 by rpki-client