Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa
File:                     b64f934a-eaaf-38eb-92d1-a200e28f5524.roa (raw, json)
Hash identifier:          CiffB1q2PbeFBn9wyPYwjySu6lvbgh6xQALzB04NYkE=
Subject key identifier:   D4:4E:E4:91:6D:91:7E:1D:26:80:2B:58:DA:CB:48:E8:43:18:71:28
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F81CEE5DDBD79CECFD2A34
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397238
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:1c:ee:5d:db:d7:9c:ec:fd:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=91ca4569-1281-48dd-871f-6b80a8460160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:d7:39:91:7c:92:f9:04:97:b6:3d:ba:3a:
                    84:ba:73:a1:68:46:6d:ad:fe:92:7a:1c:5e:5c:30:
                    d5:06:41:92:ef:56:c8:4c:9e:36:8d:df:ed:c5:7f:
                    69:05:7e:26:aa:64:c5:3c:b3:d0:37:70:13:96:85:
                    86:f7:3b:5f:81:38:bd:b0:8f:b4:87:14:e4:af:de:
                    61:53:e3:12:eb:f0:a7:06:52:fc:bb:ff:65:72:67:
                    62:2e:ad:9f:67:05:a5:f2:48:96:03:89:b4:aa:2e:
                    f1:34:18:ab:c4:19:47:ab:92:07:50:4d:9d:ba:9d:
                    58:7c:0b:60:2e:91:db:a8:8c:b4:46:c9:30:2d:d6:
                    ef:c7:31:3e:76:90:3c:dd:c6:02:da:9c:41:76:a9:
                    60:8e:81:88:d7:63:57:60:d6:56:ee:34:21:60:f5:
                    82:e0:d5:f3:8e:5c:1e:da:4b:1c:d0:9a:ec:93:ee:
                    70:05:4b:17:d2:b5:91:53:d7:2b:5f:f2:da:22:bb:
                    fb:dd:86:cc:03:77:3b:2e:e9:5b:e0:f7:bb:87:63:
                    ea:3f:dd:f7:77:f2:bc:d0:e5:dc:e5:de:8e:ce:13:
                    42:26:75:bd:9a:e1:a6:4b:f2:48:bb:4f:2d:84:ff:
                    78:d5:5c:9e:c2:bf:9f:80:40:ae:cf:fa:1e:2f:2e:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4E:E4:91:6D:91:7E:1D:26:80:2B:58:DA:CB:48:E8:43:18:71:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b64f934a-eaaf-38eb-92d1-a200e28f5524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:7d:99:bc:3b:14:52:07:15:55:ce:a1:b2:5d:fb:67:1d:
         43:88:2a:df:ef:1f:02:8e:ac:da:14:f2:93:66:d6:d1:27:9f:
         27:ec:50:63:6c:a4:74:c4:b7:15:99:be:7d:61:f9:4a:d3:b9:
         d7:f0:8c:67:72:86:d5:05:09:eb:94:75:8d:62:ed:13:10:cf:
         e7:f0:f0:52:73:49:84:b1:f4:e4:96:72:7f:d9:01:13:34:f3:
         f6:ea:75:b1:52:d5:65:e7:7c:b0:97:3a:39:ab:9b:0e:90:4a:
         ba:8c:8b:a1:b7:52:a9:0f:25:a2:7d:27:cf:08:1d:cd:e5:bf:
         08:be:8d:88:3c:05:7a:4c:f7:5d:8a:81:85:a4:ab:ef:ab:25:
         fb:6b:be:67:9f:84:97:8b:97:b9:2c:ec:c8:d1:c5:d9:04:9d:
         d8:f8:c8:d7:a7:4b:64:b3:a8:d1:a3:44:27:69:fc:6d:f5:3b:
         a2:4e:42:25:0b:ed:2b:e1:51:11:35:c5:a1:1f:f2:3b:ce:89:
         4e:13:c5:3a:72:f3:b6:4d:1c:dc:b0:0c:d3:3a:0c:c3:bb:17:
         83:f1:07:7f:e2:4c:ad:56:94:67:0b:6e:fb:a9:ec:66:01:dc:
         03:96:35:a0:54:95:3e:12:92:5b:fc:f0:d4:e7:85:e3:e5:40:
         f8:b2:a7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:09 2025 by rpki-client