Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
File:                     1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa (raw, json)
Hash identifier:          u2bWFL+bOy08tS/xgbWHxX03RXlCy9F8oBiBApt6b80=
Subject key identifier:   B3:2E:00:19:24:15:D0:31:46:62:A9:22:2B:1C:93:0D:CB:CA:34:FF
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584B33F1A9505A89C5AC65DA3800
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     36184
IP address blocks:        2620:103:6000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a9:50:5a:89:c5:ac:65:da:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=b08a2bc0-5e88-4363-be2e-8cb8804cbb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:1e:8b:04:13:6d:c3:dd:0c:38:96:86:ae:
                    de:d2:6e:ff:8d:3b:f2:95:d0:50:e6:8b:a8:b8:8c:
                    5c:8f:83:95:a8:48:35:9d:ee:85:ad:e5:eb:f9:d8:
                    1f:39:b5:1f:a0:ff:1b:ab:29:0c:41:71:c7:e6:82:
                    c6:f5:81:21:5f:78:51:ba:ed:e5:c7:7c:29:c3:e3:
                    7c:87:15:0f:74:73:52:8a:15:d7:43:6f:99:14:03:
                    fd:ba:44:ab:81:76:a2:6c:ec:bd:4f:69:de:cb:1b:
                    23:93:83:88:ae:e3:21:c5:59:f6:70:8a:36:db:68:
                    00:13:8a:a5:b4:bb:76:be:cf:ca:7f:d2:05:61:11:
                    75:fd:d1:52:56:1b:dd:4e:a9:03:25:2e:b8:4c:00:
                    5c:55:66:f6:db:ed:bb:df:34:0e:cd:b7:34:b0:ab:
                    9b:53:ed:6e:ee:6b:6f:8c:a1:c5:2c:a6:3f:5c:d5:
                    17:1f:6e:c9:59:85:ca:17:e4:95:3f:22:c7:5a:7d:
                    59:f0:66:71:d1:74:d2:be:0b:15:16:33:aa:fb:79:
                    62:39:c7:59:cd:95:01:a6:60:96:e0:79:ce:04:81:
                    8d:03:dc:54:7a:a0:42:c7:71:dc:ab:4a:fa:c1:a5:
                    b0:fe:70:0a:09:4c:4d:90:ab:19:47:47:f1:b4:62:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:00:19:24:15:D0:31:46:62:A9:22:2B:1C:93:0D:CB:CA:34:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/1f4ffb6d-05f7-37cb-8a92-da2ddf262ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:da:ce:c3:c3:34:84:7c:22:90:46:73:a9:b2:d9:eb:06:42:
         4c:34:ab:00:e4:04:7f:bc:02:e0:29:39:bd:36:98:fb:01:f1:
         33:f9:99:91:17:3a:9c:9c:c9:1a:b0:70:13:5f:31:90:37:f0:
         a6:e1:fe:d2:1b:cf:58:30:e4:19:29:55:86:8a:3d:f7:cd:4c:
         58:83:85:ee:1a:fe:16:a6:1c:ff:fe:cc:53:73:fc:8b:a6:54:
         c2:56:8d:91:9b:fa:4d:57:1d:1c:4e:77:c3:fd:22:c8:c4:c0:
         8e:ff:2d:2e:50:3c:ca:02:1f:a4:98:32:db:ba:62:a4:64:6b:
         e5:14:8a:d7:82:19:de:f2:73:43:1a:25:e6:9b:15:1e:38:4e:
         05:15:0b:6c:7c:a1:85:6b:56:c4:8e:c5:2f:fb:15:f6:b0:56:
         9f:0b:c6:2e:fa:e5:be:43:33:01:24:f9:62:ca:8a:04:05:b4:
         2b:24:d4:6b:4f:cb:cf:b2:b0:e9:f5:64:92:85:05:58:31:03:
         ff:43:c7:77:bd:23:f6:ae:45:a9:28:31:d2:0b:c8:18:63:39:
         a7:91:1e:f9:10:14:d1:1d:70:fc:a0:45:78:0c:e7:06:77:e8:
         53:bf:8e:e1:ff:9a:42:37:24:0c:59:d1:b4:ea:d0:11:0d:e4:
         6b:cb:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:53 2025 by rpki-client