Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/bb2c124a-1453-35a5-9331-a66b12f672af.roa
File:                     bb2c124a-1453-35a5-9331-a66b12f672af.roa (raw, json)
Hash identifier:          HA12di2mOFGRj+PJMvjvhSEkeU2LqBKGItDqkfx/hwk=
Subject key identifier:   AC:1E:CB:8D:3D:6E:8E:BC:89:72:6D:F8:68:18:5F:80:83:1D:01:F3
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584B05032C95D9D42308FF6B97E0
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/bb2c124a-1453-35a5-9331-a66b12f672af.roa
Signing time:             Fri 29 Aug 2025 17:33:08 +0000
ROA not before:           Fri 29 Aug 2025 17:33:08 +0000
ROA not after:            Thu 27 Nov 2025 18:33:08 +0000
asID:                     14618
IP address blocks:        2606:69c1:1201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:03:2c:95:d9:d4:23:08:ff:6b:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Aug 29 17:33:08 2025 GMT
            Not After : Nov 27 18:33:08 2025 GMT
        Subject: CN=7a382c22-88ae-4d7a-8f74-9b90fb4172e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:18:de:d3:15:48:eb:85:c3:5d:80:7e:8c:
                    d6:2d:20:63:e7:54:06:64:c5:9a:3d:41:a3:b9:d8:
                    6c:d0:ea:8a:01:83:5c:31:bb:c2:70:5a:64:d4:66:
                    be:a8:af:18:35:33:73:0b:42:68:94:83:e5:ed:27:
                    c4:23:a0:15:7f:0d:4a:b3:e0:38:96:73:5c:95:31:
                    a2:fa:2f:16:f1:3b:bc:35:19:f8:13:14:b9:b1:37:
                    d6:de:22:82:67:60:08:ca:57:31:a5:1b:6c:4c:5c:
                    b9:e3:71:c5:a4:0f:d3:59:aa:fb:b6:d0:24:0c:bc:
                    6c:fd:20:d2:32:c6:95:b6:2b:d5:d4:c9:60:3b:14:
                    6f:56:d2:e4:23:f2:ad:37:4d:4a:c1:6e:68:6a:7b:
                    67:57:1f:9f:cc:ee:4f:ba:e9:98:5e:f8:76:74:20:
                    d7:ba:b7:13:9f:38:d2:fd:93:1c:d7:86:f3:09:d7:
                    92:35:35:c1:bc:1d:dd:a1:60:02:e5:ba:2d:24:7d:
                    cb:95:cc:42:01:3b:02:d4:c8:39:27:e9:0b:c2:c0:
                    ca:0a:1d:60:01:16:03:f8:d0:ab:52:ec:e8:70:f9:
                    89:23:69:bd:36:36:4c:a3:c0:6e:f5:08:3d:78:a1:
                    83:f3:72:3a:38:e7:51:ab:b1:de:32:ff:52:5e:5d:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:CB:8D:3D:6E:8E:BC:89:72:6D:F8:68:18:5F:80:83:1D:01:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/bb2c124a-1453-35a5-9331-a66b12f672af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c1:1201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:07:af:69:0c:99:3a:d4:73:07:e6:95:e5:e7:b1:07:48:fa:
         94:56:9d:a5:ee:3c:3e:13:ea:23:c4:be:17:3f:44:97:41:fd:
         55:90:82:fb:22:1a:17:08:b0:68:b3:20:f8:f0:1b:e7:26:7b:
         35:a1:c2:b2:87:85:f9:01:82:d7:ca:09:26:ca:6b:64:80:9d:
         2e:a8:d4:bf:0e:b4:35:34:92:72:29:b2:b0:50:fa:43:5a:a6:
         e1:0d:12:10:f0:aa:7a:47:c5:1b:d2:6b:a6:94:a4:32:00:37:
         aa:89:5a:cd:d0:ee:3c:6e:98:c1:7c:9e:33:a1:84:fe:90:62:
         eb:2b:ac:45:5b:fc:1f:84:e7:12:f3:59:6b:7a:a9:ff:37:82:
         47:a3:e3:f3:1d:84:ea:09:d5:7a:dd:2b:65:bc:d0:6b:fd:ff:
         76:08:de:01:09:78:8a:09:2d:57:aa:f3:c5:ba:39:c1:cd:3d:
         87:ce:06:ac:23:14:3c:96:0b:39:ce:32:65:56:f9:90:af:35:
         a9:45:be:4c:50:3b:48:6b:e3:a5:1c:98:61:75:54:3d:07:6a:
         63:f6:6a:9d:c7:5f:5a:c4:2f:1a:ad:32:d5:34:8b:31:4e:26:
         d7:06:09:2d:2c:d9:85:c3:15:d1:bd:2a:25:a3:58:95:36:ca:
         9c:46:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:40:02 2025 by rpki-client