Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
File:                     8ca887e2-fee5-3544-b7d1-cab80697c43e.roa (raw, json)
Hash identifier:          URiTayvbsQi9f/wTVuDvO+sKdbUHk67MFQvOJaQaN1k=
Subject key identifier:   8F:9A:35:7C:50:AB:11:AF:D2:1B:47:55:36:1C:4C:D0:11:9A:DF:F5
Certificate issuer:       /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial:       010D0C9F4328584B13D6AD3895BDB6E3A691C940
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     30247
IP address blocks:        2607:b80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ad:38:95:bd:b6:e3:a6:91:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=aa81b2a0-7c1e-4bc7-beb9-20579b01e8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:0f:31:48:07:a8:95:9b:71:70:49:b4:6a:
                    75:95:be:a1:9d:9e:f3:95:af:ec:82:e9:6b:f1:54:
                    a4:15:c3:46:1b:fb:9f:84:bb:c6:f0:5c:97:fd:27:
                    91:58:46:e3:c8:85:bc:bd:ca:0b:b0:c2:9a:6a:d6:
                    eb:e8:dc:40:e8:8e:1d:91:c8:3f:17:a2:07:13:94:
                    f5:6b:a2:e2:00:22:33:f3:dd:6b:24:77:c2:9b:97:
                    32:3e:70:86:75:52:8f:88:2b:ff:68:0b:ce:d1:54:
                    3a:1f:7f:fd:97:fa:83:56:15:60:75:18:3e:bd:9a:
                    37:f9:58:2e:8c:28:32:f9:98:c5:fd:89:4e:a1:5c:
                    7c:e9:7b:3d:bd:1f:11:91:66:12:28:45:9d:75:1d:
                    57:1c:dd:4f:12:e3:96:bb:54:b0:4e:c5:9d:20:ae:
                    35:c7:6f:d5:28:80:fb:19:a2:45:1d:6e:ee:9c:96:
                    e0:cd:fe:c9:aa:15:ca:14:23:67:1f:80:8d:df:9b:
                    b9:55:c7:29:fc:92:31:03:55:06:66:ba:9c:35:93:
                    a3:f9:0e:a3:8c:93:ce:49:1f:8c:5d:5c:cb:42:dc:
                    65:d1:51:d7:09:9f:c8:98:9a:5c:e7:25:0f:c0:9c:
                    d4:95:55:b9:db:26:c2:01:87:f3:21:98:44:da:1d:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:35:7C:50:AB:11:AF:D2:1B:47:55:36:1C:4C:D0:11:9A:DF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/8ca887e2-fee5-3544-b7d1-cab80697c43e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl

            X509v3 Authority Key Identifier:
                keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1d:dd:e3:b7:7b:d9:1c:1d:fc:5e:58:34:3a:39:fa:78:c6:
         5b:64:70:7d:99:b0:ad:a2:88:bf:3f:9d:a8:16:8a:b9:78:29:
         98:71:3f:df:b9:5b:56:cf:5d:3d:e6:bd:23:a7:1a:98:02:06:
         7d:df:1f:7a:4d:9b:fc:bc:41:71:45:da:68:ba:9e:99:2e:13:
         6e:51:c2:40:d9:75:cc:c5:97:79:e9:08:62:3c:06:39:66:6b:
         c0:ed:97:63:6e:cb:bc:b2:70:32:31:19:5b:e2:14:a7:a7:6f:
         03:0b:d1:ed:b2:c0:3f:ec:0a:1a:33:6f:51:3b:d3:2e:40:99:
         af:be:3d:d4:4f:49:96:09:a8:f4:50:30:79:66:54:65:c2:4b:
         44:5c:1a:92:28:42:18:d5:c9:c7:9d:00:8c:2a:73:ca:35:84:
         41:7a:cd:3b:49:cb:b5:64:20:1d:3e:9c:f1:1b:15:ff:b6:05:
         ed:e4:fa:f6:2d:0a:37:9f:7a:59:96:2a:28:3a:f0:e4:84:b3:
         7f:43:a2:1a:2a:69:57:d8:bd:cd:47:57:2e:15:59:f9:49:63:
         38:1c:80:d3:8f:0f:d8:84:a9:d1:56:ac:ce:34:b1:c2:34:c7:
         fd:b4:f1:e4:f6:23:53:74:16:c3:86:5d:9d:ce:2b:8f:4f:e0:
         56:8e:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:50:11 2025 by rpki-client