Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
File:                     081735a6-8094-3e29-bc11-0063831723b9.roa (raw, json)
Hash identifier:          Gn/IXYnw9KDMnwLikus+zJX934ONd9e6gWn2bdfTkRc=
Subject key identifier:   0B:FC:91:EB:09:8C:6B:E6:59:61:AF:21:E9:95:FB:68:F4:D1:C5:8B
Certificate issuer:       /CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Certificate serial:       010D0C9F4328584B636742653C255A293D484600
Authority key identifier: 1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     30674
IP address blocks:        2605:c780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:42:65:3c:25:5a:29:3d:48:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=4a8a88eb-94d3-4207-bc48-65bc16c8529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6c:90:aa:e6:ef:c7:34:ac:3e:b6:6e:fe:a2:
                    b7:83:2d:97:fc:13:f3:e5:3f:32:55:2d:4d:e7:fd:
                    95:8b:25:c3:22:50:54:8a:b5:a0:33:2e:5b:29:9e:
                    ca:e3:f4:04:79:56:fb:50:ae:38:99:a9:e0:66:f3:
                    ab:ef:33:2d:e3:4d:92:66:16:33:6a:f0:7b:fd:86:
                    b2:8c:19:99:2d:37:c9:08:7c:d5:cc:9b:e1:70:3b:
                    ec:fb:c8:b3:30:86:a3:c5:d4:b1:54:63:f3:38:f3:
                    a5:73:77:cd:ac:6c:0e:ac:7e:06:3e:64:be:f6:14:
                    12:85:f3:f9:38:3d:35:ff:b7:5f:07:25:81:31:e1:
                    6c:8c:45:b3:da:e8:b1:21:c4:ea:6e:96:c3:72:66:
                    09:78:82:c0:49:51:18:9b:48:76:9b:b8:12:fe:40:
                    89:c0:3a:3a:18:f3:97:2c:b6:3f:57:b2:07:2b:c6:
                    9c:04:09:f3:4f:e2:c8:d2:3b:93:8d:20:6a:22:77:
                    6c:92:37:07:71:dc:c1:d8:d9:cd:7c:91:ad:bd:46:
                    79:55:63:88:9a:5b:01:bb:28:a7:e2:fa:3a:6e:95:
                    fb:d2:45:5d:54:fa:37:99:c4:bf:8c:c7:49:88:37:
                    55:61:f6:e9:9e:53:e2:42:45:d6:d3:8f:28:52:8d:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:91:EB:09:8C:6B:E6:59:61:AF:21:E9:95:FB:68:F4:D1:C5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl

            X509v3 Authority Key Identifier:
                keyid:1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:9f:1b:ed:4e:d8:e4:50:81:f8:e4:3d:39:0f:7b:5a:e9:
         3c:59:64:34:ee:ff:06:93:9e:9e:39:6f:0d:c6:8c:ca:f1:a4:
         87:0d:82:24:3f:89:e5:06:b8:20:06:88:2a:74:3c:38:1b:73:
         a2:01:b1:7c:03:01:96:e4:ce:e8:50:54:2f:7a:d3:e0:0e:b1:
         c6:04:63:ce:98:f3:6c:a2:af:c3:cd:53:6c:52:00:db:2a:55:
         9e:e5:c6:6b:a7:51:3a:20:89:dc:ab:50:98:4e:fa:b0:a5:4a:
         b5:8c:4f:9a:41:90:b3:50:c3:c3:aa:dc:80:9c:62:7c:0d:05:
         97:07:a4:90:47:a8:22:d1:78:02:7d:c8:7d:4d:38:92:9a:af:
         93:91:4e:b8:be:09:6e:ae:1a:09:43:7f:d7:ac:f6:28:c4:83:
         8f:3b:e5:7e:83:59:d1:49:a7:d0:b3:0d:d1:9b:72:01:bb:86:
         59:c5:74:f2:9d:d3:ba:e9:4f:a3:e9:06:2f:4a:13:8b:5e:23:
         99:4e:c2:b5:d6:d9:fa:24:63:11:d1:77:dd:18:ae:7d:e9:9b:
         d9:79:7b:5f:01:56:6c:41:a2:5e:db:7e:fc:69:71:4b:35:29:
         08:c6:94:ce:e4:cf:6a:ce:03:27:f6:e2:27:45:37:a3:09:b2:
         08:d6:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:15:05 2025 by rpki-client