Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
File:                     11869df8-11c1-3bf1-903f-f89a2a459e6a.roa (raw, json)
Hash identifier:          bmzvYajruYoH2KN9bWG078qYw9U88qGWFOFUZa1XWYw=
Subject key identifier:   27:FF:4B:F1:1D:E2:94:FA:8D:02:A4:E8:B6:D8:16:8F:D1:B4:61:24
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F4328584B0B76A76CB3CC6B52B0567000
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     12261
IP address blocks:        2606:900::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a7:6c:b3:cc:6b:52:b0:56:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=3c2d58ae-ca13-4168-953d-48c4eed50278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:5b:74:d0:84:89:c2:04:64:e1:2e:29:ad:
                    05:27:f5:58:4f:30:98:68:7a:b9:84:33:31:e8:51:
                    06:51:12:09:ea:b6:46:66:eb:46:65:95:2e:9e:30:
                    a9:cd:9e:19:4b:9f:16:a5:ca:88:e8:28:62:67:11:
                    07:2a:bc:b7:2d:54:68:b8:68:a9:78:c7:3d:43:26:
                    f3:b9:31:da:80:42:7a:78:f3:0e:2f:5b:4c:76:43:
                    06:08:a4:56:77:eb:4d:56:ff:f5:e3:9a:6d:23:10:
                    47:7f:24:97:e0:d4:aa:e6:e6:9a:f2:a9:60:ff:a1:
                    59:69:fa:9e:da:36:3a:1a:e3:02:be:4a:58:4a:0d:
                    4b:21:dd:ec:ed:c5:07:1d:08:cf:bd:7a:ac:77:26:
                    77:1d:6e:dc:bd:65:e9:b6:c5:fe:cf:cc:c6:c6:f4:
                    df:06:ed:97:6c:b0:7c:10:da:0b:39:2a:1e:c4:f5:
                    db:86:37:73:b1:ab:5b:4f:85:82:59:b4:e0:5c:08:
                    ad:aa:f9:9d:fd:2a:07:be:aa:cd:8a:7d:6a:43:02:
                    94:b2:9f:d2:14:80:a9:5f:26:94:9a:68:19:c3:8a:
                    73:bc:2d:2a:ea:e8:4a:92:c6:1f:78:04:be:fb:e9:
                    54:29:a3:2c:b4:ed:4a:48:17:7b:c9:55:da:98:7f:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FF:4B:F1:1D:E2:94:FA:8D:02:A4:E8:B6:D8:16:8F:D1:B4:61:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/11869df8-11c1-3bf1-903f-f89a2a459e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:89:e8:a6:55:fb:ec:cc:31:6e:48:e8:53:da:7e:bd:b5:87:
         79:14:fe:14:16:a1:82:fb:1d:10:38:e7:d1:03:40:18:ac:c5:
         ea:67:95:c8:fd:ac:e0:74:5f:c6:20:05:b2:70:f4:37:b4:f9:
         69:12:d0:81:a4:65:b9:50:cd:37:a3:30:71:5c:b6:94:bb:a5:
         46:a6:43:01:e2:b6:74:5e:d5:e0:46:0b:3d:d0:16:f7:cf:99:
         38:00:d3:1a:a1:85:3c:4b:31:48:ea:d2:04:99:9e:2c:6e:d7:
         d2:6b:c0:65:a2:24:cb:50:c9:66:7e:a6:b6:e5:f7:2f:62:34:
         3d:dc:5f:2a:29:d3:44:9b:44:cc:33:14:92:0d:a0:92:c1:ab:
         00:b9:11:79:90:c8:ca:f7:c1:d3:90:6e:8c:ac:72:65:5f:c4:
         f6:ca:b9:1a:15:a7:86:bd:63:d8:2c:f0:cb:13:d7:e2:2a:05:
         ca:ab:d8:01:37:d8:12:c3:08:89:df:f2:d5:5b:d1:c1:4f:e1:
         b7:4b:b4:74:d8:e9:9b:db:51:fa:fe:5a:cf:2a:2c:cc:f9:4f:
         e5:f9:af:33:49:52:ad:6e:66:64:f6:63:0f:77:b0:c1:de:6f:
         45:6a:c0:0a:51:9b:2a:87:56:50:c4:cf:af:86:df:1c:4a:04:
         3b:de:06:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 16:50:14 2025 by rpki-client