Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/916179ef-7142-3ec1-951e-9423c304456b.roa
File:                     916179ef-7142-3ec1-951e-9423c304456b.roa (raw, json)
Hash identifier:          0t746TAJhwNsz/zlJZU2hNz95rAIVgCHhVwGwtcXJtA=
Subject key identifier:   85:A5:EB:CC:A8:39:A9:E3:05:8E:27:28:55:09:64:08:0A:A0:AD:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F820F8BE82BA3927709A80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/916179ef-7142-3ec1-951e-9423c304456b.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397234
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:20:f8:be:82:ba:39:27:70:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=3c334cd4-e809-4b2c-9ed5-0ad7fbb851d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:d7:83:48:48:3e:84:19:22:24:8a:9f:af:
                    db:1c:d5:f8:eb:27:5d:1f:8b:4d:95:a1:bd:14:8b:
                    ec:39:b8:cd:c2:7f:2a:d1:2b:1b:2d:ad:a0:8f:48:
                    51:43:f1:07:3a:b3:04:3f:a5:90:ee:ba:90:50:81:
                    fa:94:01:ad:11:91:57:74:00:b4:78:71:eb:63:31:
                    44:c9:74:c1:2d:1b:22:5f:a8:b1:44:08:38:37:77:
                    89:c5:67:5d:16:70:7d:77:bb:b8:e2:0d:5e:62:ad:
                    53:11:0c:50:9e:f5:64:a1:df:14:10:5f:d2:bb:b6:
                    7a:67:56:9a:79:00:a5:09:b9:ee:48:ec:33:b5:18:
                    db:42:a7:64:73:fc:2d:f1:af:95:ea:45:eb:4a:47:
                    a5:cb:10:c1:40:64:62:f1:e9:45:de:a1:82:ac:03:
                    0a:fe:c9:f7:d5:ef:c7:01:85:7e:ef:22:de:e1:e7:
                    a1:00:18:5f:75:d5:8d:31:64:8f:f1:ea:58:23:7e:
                    bf:3e:4e:33:2d:1a:07:ba:fa:0b:8e:52:56:d8:83:
                    d1:84:06:ec:90:22:84:0d:6d:69:3f:3e:c7:a3:0a:
                    3a:f7:82:b2:77:7f:05:0b:34:5b:e1:3c:4e:16:b3:
                    5c:a2:36:ae:26:78:e1:86:d0:af:b0:ba:b4:03:d2:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:EB:CC:A8:39:A9:E3:05:8E:27:28:55:09:64:08:0A:A0:AD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/916179ef-7142-3ec1-951e-9423c304456b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:53:c5:54:9f:01:65:bc:ee:1f:ff:43:cd:cd:cc:4f:19:42:
         d9:b7:c1:70:2a:6e:14:6d:a8:ce:2f:06:3d:a6:cb:de:79:86:
         11:bd:ab:f4:bd:53:a8:92:9c:2f:84:89:a5:3f:11:ee:94:64:
         7e:fb:86:19:ad:3b:9f:30:b9:f1:d0:dc:e1:09:df:4f:bf:ac:
         dc:80:a8:ed:59:01:3a:4d:12:0f:e1:27:ec:40:c7:41:f5:14:
         be:aa:a6:f3:ea:76:b9:94:ce:e4:2b:dc:85:df:e3:10:a5:06:
         11:12:aa:dc:3b:bf:70:5a:96:fb:de:0a:b1:b2:53:11:62:73:
         6f:53:d2:32:89:2c:0c:33:1f:28:c8:9b:00:45:79:02:ec:7c:
         1e:f4:74:33:05:86:89:3a:a9:0c:76:dc:7a:72:d4:f0:02:22:
         40:9b:2e:b5:e2:d0:84:45:4f:03:69:6b:58:56:26:67:22:7b:
         36:99:53:92:42:2c:b4:22:80:3e:78:7e:e4:07:31:1d:76:d5:
         71:ba:0a:fd:45:1c:af:ef:4d:5d:19:1b:e3:9a:05:5c:7c:5b:
         a2:58:e0:d2:9e:e6:9f:26:c4:d7:bd:c2:ce:1a:29:e6:bf:5d:
         83:de:f0:2c:ea:8f:65:0a:53:02:cf:5d:bc:5e:11:2d:7b:3a:
         9f:4d:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:06:52 2025 by rpki-client