Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91073497-aabd-3421-a57a-bd56e0d2d844.roa
File:                     91073497-aabd-3421-a57a-bd56e0d2d844.roa (raw, json)
Hash identifier:          bORNeRh74nbU2b2O/SzF6wh81A0m0/UQb3d863zRB4Q=
Subject key identifier:   9C:3B:33:B1:22:70:BD:4E:B4:6D:E6:9A:80:E0:A4:A6:98:B4:83:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D0FCDBCA9DF3D6558AC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91073497-aabd-3421-a57a-bd56e0d2d844.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     12222
IP address blocks:        2001:4878:c048::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0f:cd:bc:a9:df:3d:65:58:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=de5f61a4-0083-4909-9310-2d0190b1bccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:02:78:f7:bd:5b:51:21:31:42:07:2c:62:
                    e8:5a:76:93:6d:47:04:f2:d5:93:2b:a8:1e:0a:fa:
                    3b:48:12:49:cd:01:13:c2:1c:b9:a5:af:1a:b6:84:
                    e0:2e:92:fa:ce:e5:f6:cb:39:32:99:af:fd:89:ac:
                    11:ed:63:bb:a3:ef:42:f5:6b:4c:32:b6:d2:b2:63:
                    76:cf:73:57:83:47:6f:7b:26:bd:2f:5c:fa:e4:60:
                    b4:cb:7a:b1:ae:7b:3a:ae:2a:8b:07:c5:6e:ab:88:
                    48:97:8c:21:6c:18:21:e2:85:b7:4b:80:67:e8:df:
                    22:63:bc:42:4a:ec:12:fd:e1:46:86:26:d7:e9:0f:
                    0e:46:ff:b8:7b:ee:44:b0:2c:4d:d0:0e:e2:10:16:
                    3e:af:14:74:94:43:fb:a8:5b:39:86:02:eb:5f:dd:
                    a4:56:07:f2:45:77:62:89:3d:6d:7c:5d:fa:6e:62:
                    9d:71:40:f5:cf:77:d2:4f:ba:0b:46:21:93:60:e4:
                    37:f4:b8:32:dd:72:f0:80:93:5c:41:b9:90:0b:7c:
                    fa:fd:5d:5d:90:ce:66:1f:3e:a3:00:22:f3:98:52:
                    48:8e:db:0d:38:25:37:a2:ea:1c:e5:74:2b:bf:6e:
                    c8:30:cb:bc:d7:83:40:4e:ba:89:0d:08:a3:dd:9e:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3B:33:B1:22:70:BD:4E:B4:6D:E6:9A:80:E0:A4:A6:98:B4:83:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91073497-aabd-3421-a57a-bd56e0d2d844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c048::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:0e:35:43:93:83:7c:f0:70:0d:13:0e:37:f1:00:e4:0b:
         41:68:43:f5:c6:db:05:0d:2f:27:83:43:04:9b:e7:bc:df:43:
         f5:be:30:ab:14:45:22:c4:d1:af:dc:6f:e2:ed:ea:1e:61:0d:
         95:d4:91:15:3b:06:47:b0:d5:11:e8:b5:ed:85:9c:99:ab:98:
         00:b8:83:01:e2:45:8f:2e:6d:d7:2a:fa:dd:b4:e5:5d:66:cc:
         f9:f1:0c:c0:22:0a:8b:a5:28:80:a2:d3:d9:f9:63:e7:f1:fb:
         c0:03:5d:e7:54:2f:28:44:a0:69:77:40:74:d6:0d:c8:4d:27:
         29:ab:c5:c2:bc:4c:89:ec:74:90:a5:70:55:74:05:6d:e0:ab:
         a3:2e:fe:d7:c2:ee:d6:e0:a7:60:3f:af:f3:1e:49:21:5d:ab:
         41:5d:ac:75:f7:01:b7:e4:a9:61:c3:b5:ee:90:58:e6:bf:50:
         b2:f1:df:d4:ba:12:53:ad:49:4e:72:ad:43:7c:5d:7b:8e:27:
         aa:d8:87:89:4a:c7:96:72:e2:65:5b:cb:66:ce:7c:5f:41:b7:
         75:c9:c0:b9:a7:be:e8:b1:91:bd:80:55:6f:72:a2:c9:37:29:
         d3:5f:f3:77:95:1f:62:14:48:78:12:d9:ab:c2:b6:b0:8e:a5:
         ea:56:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:04:51 2025 by rpki-client