Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
File:                     6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa (raw, json)
Hash identifier:          ZKJapsbJXdb8LraaVBVdKOLQ3qYctXGeU8BempfWNaw=
Subject key identifier:   B4:E2:07:11:37:CE:DB:9B:E8:1F:CB:35:18:D5:21:86:48:D1:2E:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D0F72A541B49740A86140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:b102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0f:72:a5:41:b4:97:40:a8:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=964a7928-a2c1-45a1-bf22-42008523e345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:01:ce:15:43:f8:71:b8:05:13:97:16:06:09:
                    53:88:bc:07:8a:67:31:15:b6:16:f5:4e:ea:af:5c:
                    1c:6b:08:fe:49:d9:56:cd:99:d1:97:67:c1:7e:8e:
                    11:ea:28:61:62:a9:72:d6:1d:a1:d7:1b:d4:84:94:
                    9e:ed:0a:54:30:35:3a:57:24:d1:18:b1:66:4f:5f:
                    67:6d:47:23:30:3b:f7:d5:a7:55:b7:ff:73:2b:3c:
                    f6:49:03:0e:74:62:25:23:77:8e:80:cc:c4:f7:d0:
                    db:d9:2e:41:a3:e1:56:63:1c:db:f0:3e:db:24:52:
                    a7:18:c1:9e:38:fa:96:d6:32:52:d7:6d:16:52:9b:
                    78:24:a1:0a:f2:d4:20:c2:d6:9d:5d:fd:24:39:ec:
                    57:8b:61:e6:47:13:30:fc:2f:8b:57:8b:a8:69:83:
                    79:62:eb:58:f0:01:84:b7:4b:bd:94:59:87:41:48:
                    a2:1f:6e:8b:8a:9c:18:bf:6a:f1:e5:4a:a6:07:cc:
                    bf:5d:5e:bf:58:af:e0:1e:6a:fd:24:30:34:0d:d5:
                    b7:b4:47:f9:b6:8e:33:74:44:c4:cc:6e:1f:21:14:
                    1e:5f:44:ae:18:87:4b:95:ab:e6:8a:6c:03:33:25:
                    15:22:a1:ca:dc:c1:ca:aa:dd:ab:ed:f0:6b:52:43:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:07:11:37:CE:DB:9B:E8:1F:CB:35:18:D5:21:86:48:D1:2E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:0d:94:b9:2f:89:e7:0d:24:d0:85:79:2a:f3:89:12:ee:
         35:75:da:13:14:8d:69:b2:14:85:8e:c0:2e:40:74:85:c5:49:
         11:20:49:4c:4e:47:3f:79:80:80:5c:b8:14:4b:1c:3b:02:90:
         7a:4f:12:35:8e:fa:f7:43:68:f4:56:da:80:9a:32:50:44:e3:
         68:0f:da:41:10:47:ec:f7:bf:d4:db:0f:f7:b1:fe:d3:b0:a0:
         ca:7a:ea:5c:f5:41:f7:14:5e:f5:bb:9c:af:0f:92:fd:91:bb:
         ad:61:a1:13:72:2c:b7:4c:0b:7c:e7:6c:e4:0f:00:db:7a:32:
         a8:f5:5e:96:0f:03:3e:04:4d:a7:38:f5:67:2b:f0:83:79:80:
         78:65:69:de:e5:6e:ad:4c:64:a1:a2:1a:5e:2d:4e:79:66:6e:
         6f:65:cf:67:10:92:a8:b8:6a:e5:09:c5:f4:92:65:1a:1f:7a:
         88:25:b4:f8:96:43:9a:45:6f:31:81:50:e4:66:4f:cb:7d:3e:
         a6:9d:17:09:a4:8a:cd:70:8e:ef:6e:7a:09:58:d2:85:59:d7:
         17:3a:4f:39:dc:0b:51:9d:f8:34:32:43:0e:ae:8a:b9:48:b7:
         ec:ab:48:61:c0:27:82:65:2a:f5:5f:ea:d3:9a:44:dd:95:d4:
         bb:92:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:10 2025 by rpki-client