Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
File:                     e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa (raw, json)
Hash identifier:          9/oM+IX1iKAbq9DI1ZJHbQD9gE34AJBhiwLjfcUMwoU=
Subject key identifier:   E8:74:E0:60:66:21:9D:B6:CB:BB:42:DA:0E:0A:EC:78:0D:07:E9:A3
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584BABFD0217C33F3FAE814E24D0
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     17045
IP address blocks:        2605:84c0:54::/48 maxlen: 48
                          2605:84c0:55::/48 maxlen: 48
                          2605:84c0:56::/48 maxlen: 48
                          2605:84c0:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:02:17:c3:3f:3f:ae:81:4e:24:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=84ff3d1e-b53a-4464-9a64-4395fe233ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a6:7a:98:bf:dd:87:b3:ad:20:60:db:ff:9e:
                    94:4c:ce:80:68:dc:11:aa:70:d5:c8:30:2e:37:5e:
                    0b:09:70:fb:86:76:5d:6e:70:ec:f5:5e:03:cd:95:
                    9d:21:81:37:8e:e6:42:9c:e5:2c:e1:a4:e4:eb:5c:
                    a2:a6:a9:1c:d5:af:db:79:13:46:ef:f5:ac:76:09:
                    b7:73:de:c3:4d:1c:25:c2:41:cc:33:bb:fb:18:9d:
                    a1:22:65:1a:b9:82:2e:b1:19:05:47:5e:17:12:3e:
                    68:c1:8e:d9:a8:6a:8c:6e:6c:2f:f7:cc:d4:9c:8f:
                    98:68:41:5e:db:ea:ac:fb:1e:a9:f6:c2:8b:66:12:
                    e2:be:7d:6d:19:58:17:3c:5c:06:4a:d7:ae:01:29:
                    d3:05:e2:9d:ec:b9:39:b1:05:ea:d1:16:ca:06:c6:
                    5e:39:5d:b2:6d:39:e8:1e:0f:2f:e8:f5:64:c9:63:
                    84:29:24:18:cd:e8:ab:36:3b:03:bf:3a:5c:ea:ff:
                    57:3e:b0:06:c9:2c:45:9b:49:66:17:f4:96:a7:14:
                    df:a6:f7:12:b4:74:15:b5:77:0e:6a:cb:84:a9:5d:
                    90:1b:99:84:6f:f0:db:36:cd:43:c4:8c:fa:c2:3c:
                    af:73:b2:54:b5:86:4e:ba:9e:ec:bd:4c:ef:cb:1f:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:E0:60:66:21:9D:B6:CB:BB:42:DA:0E:0A:EC:78:0D:07:E9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e1f3f72d-c321-3b0c-84a7-830dddd4cf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:54::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:8d:5e:84:f1:ab:01:c8:59:8a:85:f0:61:ee:f9:3e:a7:de:
         54:f6:6d:ea:16:d0:73:a0:35:0a:25:49:35:52:b1:26:69:22:
         71:3f:c1:83:25:43:fb:22:0b:46:ac:45:28:13:59:c2:3b:a7:
         4c:a1:15:1d:ad:9b:37:57:4a:61:e4:3e:71:92:64:99:f2:84:
         a2:20:f2:e7:a7:63:54:71:a0:6a:2a:6d:35:46:0f:a9:a4:14:
         41:be:00:0e:be:95:f1:e6:e3:60:86:b6:5e:52:fa:d9:af:9f:
         25:80:2d:10:c7:b6:9c:ca:19:35:5a:a7:df:59:97:df:15:f0:
         cd:58:8d:b0:11:39:87:b8:cb:d6:e4:cb:38:a3:16:c0:c1:fc:
         be:11:4d:e3:3a:0c:40:44:38:83:bd:bc:17:b6:89:d5:5f:0c:
         c3:a1:71:fe:6c:ae:0f:78:ca:e9:bb:3c:cf:de:9c:fe:03:d3:
         7b:5b:49:95:44:1f:5b:dd:3d:30:4c:c6:9a:3b:e8:fb:eb:84:
         1f:6c:e3:f6:f0:bd:1a:84:5e:7d:9b:6f:91:59:cc:cd:75:be:
         3d:b8:f7:ec:43:f8:76:69:10:5a:c3:7f:ae:7e:05:0b:96:ba:
         68:9b:54:9a:d2:83:75:9d:00:20:86:a3:0f:47:a1:c6:0b:f0:
         0c:02:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:08:15 2025 by rpki-client