Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa
File:                     1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa (raw, json)
Hash identifier:          c/QcW/hzNQ5Dv49lwLXGa4h7fs5WhMKfy1RRoHH2yiQ=
Subject key identifier:   F1:66:84:70:C0:DD:A3:11:12:B9:CD:2D:19:A2:8E:86:1E:60:9E:65
Certificate issuer:       /CN=b8726973-ff15-4a26-89ff-62843d7ac580
Certificate serial:       010D0C9F4328584AFC1C0A11C8ADA1EBA94C3A80
Authority key identifier: 01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     36048
IP address blocks:        2605:bfc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:0a:11:c8:ad:a1:eb:a9:4c:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8726973-ff15-4a26-89ff-62843d7ac580
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=3fa95b50-0b04-4ee6-8f0a-4a4851750343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:0f:41:24:9f:78:3d:45:15:42:e3:86:03:
                    60:cf:4f:da:4c:39:28:80:1d:62:61:17:a2:34:12:
                    1b:58:b5:6f:94:0d:93:b6:f3:fb:4f:e4:02:e0:27:
                    8a:1c:6b:c5:01:a7:de:c7:ef:e5:27:ac:2f:bc:81:
                    ad:36:4d:12:29:51:74:7b:c0:37:de:00:da:5b:5f:
                    a5:fd:08:b9:8c:0f:aa:97:2b:be:5c:dc:33:56:48:
                    45:4c:eb:36:45:8f:cd:79:85:b9:63:1d:b2:87:98:
                    6d:59:62:b1:c0:99:95:78:b1:e8:93:4e:1e:08:aa:
                    b3:f1:5c:41:a9:4b:9c:5c:1c:bf:75:5c:06:5d:28:
                    2c:13:b0:c5:2e:fa:08:1c:8d:f2:ce:3f:69:80:48:
                    54:b0:e6:63:64:88:73:a1:a2:55:d7:86:2c:40:6a:
                    66:92:e4:28:b9:68:b2:8a:fa:b7:4c:f3:f1:59:db:
                    51:99:3a:bf:70:72:bc:54:67:a5:d7:9d:1a:2a:3e:
                    41:5d:a4:d3:b1:95:bd:20:10:17:ef:ef:42:b9:6c:
                    6a:22:fb:93:ec:07:fd:9d:a1:68:6d:fa:bd:28:f7:
                    7b:cf:57:da:9e:18:6c:e3:95:cf:47:b8:b2:ea:db:
                    93:5f:32:cc:92:09:75:5c:ce:83:2c:ed:12:ba:fa:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:66:84:70:C0:DD:A3:11:12:B9:CD:2D:19:A2:8E:86:1E:60:9E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/1e38a4e4-fd0e-3bd7-8eeb-09ad773ec5aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580/b8726973-ff15-4a26-89ff-62843d7ac580.crl

            X509v3 Authority Key Identifier:
                keyid:01:E6:D6:E9:E7:00:84:AC:F4:2E:D2:2C:D5:36:FD:A4:2A:3F:DF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b8726973-ff15-4a26-89ff-62843d7ac580.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bfc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:33:43:21:64:88:fe:fe:1c:3e:e8:f0:fc:b8:09:86:f1:26:
         d9:17:4d:17:6b:aa:97:29:9e:ad:b9:29:e8:f6:2d:4b:73:f9:
         85:e5:80:9b:e6:ea:44:26:24:3f:f0:5a:4f:c2:4a:a2:e1:f8:
         a8:66:1b:e7:1c:dd:9f:2c:0e:4e:18:c4:b1:f0:a1:46:15:ed:
         5b:fb:85:67:57:bf:af:9c:2a:f4:5a:2c:15:b4:a0:8b:57:35:
         05:44:57:68:a3:87:31:1f:db:80:a4:e7:7a:ef:4f:fd:1d:07:
         fb:93:4d:58:e9:31:7b:fa:c4:69:d8:56:41:96:cf:f9:41:83:
         fc:3f:85:e6:ca:c6:4b:67:79:38:0d:33:5e:27:2d:4b:52:af:
         e3:2c:c9:67:55:00:25:63:51:59:3b:3c:5f:af:0f:e6:bf:41:
         16:67:f0:7d:e4:55:3c:a1:88:99:d2:5a:95:54:3f:b1:df:f5:
         f4:1f:ee:15:64:05:21:05:0c:03:c3:06:c9:c1:18:88:b7:37:
         29:91:ac:30:ec:7a:47:16:ba:a1:0d:2a:34:f9:60:49:95:00:
         68:10:c4:ab:82:43:e8:6f:cc:b4:b5:54:53:11:59:bb:71:a6:
         5d:12:7e:fe:c2:84:8b:43:ce:31:8e:86:b8:0a:9b:2e:0b:6c:
         11:17:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:36:35 2025 by rpki-client