Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
File:                     0e321529-67b0-3b6c-80fb-23ea199d219e.roa (raw, json)
Hash identifier:          pGXeUv96euX4wlFhfSseoLnaoFwMKKiT2PlEKPfoqj4=
Subject key identifier:   20:52:27:CE:0D:97:25:60:A3:01:D7:9E:17:A5:C3:37:19:6A:65:63
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F8163054801CEA65616640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397234
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:16:30:54:80:1c:ea:65:61:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=5abde9ef-282f-4f22-a227-5dd1dd4e7462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:6c:6f:47:8e:a3:e8:b4:44:74:97:64:a5:
                    97:06:b6:4f:46:7e:36:4f:b9:84:4a:ca:b8:19:9d:
                    98:81:75:b9:0e:42:8b:7d:c2:c3:49:ed:7c:6d:46:
                    28:d5:14:1e:41:d7:86:12:18:9d:b6:d3:b7:0c:91:
                    dd:19:d2:bb:dd:10:92:1f:fa:32:14:73:1b:e7:72:
                    74:1e:1e:0a:02:dc:f9:63:e7:63:56:d3:94:35:11:
                    5a:bc:fd:f7:3d:b9:b7:f7:15:1f:02:ce:34:de:b4:
                    9d:42:ac:f7:d1:89:45:8b:a0:14:0c:cd:27:d5:5b:
                    f3:51:14:49:17:c3:a4:8d:76:1c:ae:a8:de:31:d5:
                    88:8b:b5:38:6c:f6:80:7b:85:c7:55:a9:d4:c1:cf:
                    39:f2:a1:8a:79:d2:8e:6b:7d:b1:34:24:48:e5:af:
                    50:92:f6:e3:05:3e:ab:04:73:6e:65:d7:43:2a:3f:
                    ab:6a:ab:b9:f0:15:f1:eb:f9:0e:9d:ab:ba:c3:0a:
                    f2:78:5e:78:30:bf:07:58:22:64:7f:02:92:76:28:
                    85:61:37:00:41:f9:f6:9f:24:c6:07:f5:2a:f4:1b:
                    3c:8b:a6:45:71:26:73:cd:3e:a4:72:32:4f:27:bf:
                    e6:f9:dc:cc:72:df:27:88:76:56:00:c6:92:5b:5e:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:27:CE:0D:97:25:60:A3:01:D7:9E:17:A5:C3:37:19:6A:65:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0e321529-67b0-3b6c-80fb-23ea199d219e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:4c:9b:93:84:a0:2e:65:80:ad:a7:22:a6:7f:05:0c:d5:
         82:5a:b6:28:8a:72:5d:17:04:24:5d:f2:3f:ce:0f:7f:80:d0:
         18:a0:4f:5b:da:00:20:00:98:2e:df:1a:2d:f8:1f:9a:34:99:
         a3:31:85:49:98:89:44:1f:e8:22:30:59:3c:cf:ef:09:ea:79:
         d3:8a:72:ca:f2:26:63:0a:7d:66:c4:23:92:df:32:27:12:0d:
         0e:3b:0f:e8:13:a1:d5:40:0f:58:f3:f7:02:00:91:48:1d:55:
         a0:3f:64:8f:75:09:6a:54:50:53:fe:d7:f1:85:87:7e:4d:c9:
         3b:b0:10:11:5a:8d:b6:64:b9:11:50:b9:36:fa:a0:77:8c:11:
         63:8b:01:6a:cf:39:11:6d:16:51:35:43:a5:4c:c9:85:28:16:
         9a:82:4c:93:f1:cf:d2:d8:91:22:d3:69:a0:29:6b:a6:55:81:
         1b:ba:05:7a:84:96:1d:d2:b5:13:e9:71:65:00:f5:12:49:40:
         e2:f1:1c:9f:a1:f6:39:97:2a:d2:94:fe:02:f6:89:1a:b1:b3:
         a2:e1:45:4b:bc:6e:34:80:7c:71:26:16:74:a6:06:4f:97:3c:
         60:41:0f:6d:f8:50:8a:0c:e5:b3:b0:4d:78:ac:99:99:9d:fa:
         17:9e:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:16 2025 by rpki-client