Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/b87dc33c-a70f-38de-b5cb-1097013fa7e7.roa
File:                     b87dc33c-a70f-38de-b5cb-1097013fa7e7.roa (raw, json)
Hash identifier:          bMzb0yktq3S0xWReu9zivR2rejEpZgylzv6PIp1v33Y=
Subject key identifier:   0A:5E:4F:1A:A0:38:24:D4:F3:44:6F:FA:F5:8E:63:F4:55:F5:5F:41
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F4328584B328C330FA582CACE71688D80
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/b87dc33c-a70f-38de-b5cb-1097013fa7e7.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     36103
IP address blocks:        2604:76c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:33:0f:a5:82:ca:ce:71:68:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=1fe81d95-f820-4824-98a6-99217257fdcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:f0:43:9e:83:f3:cf:fc:d3:b2:fa:f3:3f:
                    f1:e0:d0:57:18:8e:8c:6a:a0:d9:34:b5:74:d6:5a:
                    e3:2e:6f:fe:7b:c1:a1:73:e9:59:48:2a:4b:cb:c9:
                    d1:ee:c2:db:be:30:4d:34:f3:55:85:eb:f7:47:0e:
                    ab:b7:48:b3:b6:36:33:5d:35:d7:36:23:fe:c7:ec:
                    86:11:ed:0a:57:92:99:85:d1:d8:fa:61:42:16:ce:
                    8d:73:e2:75:81:9f:1b:59:88:16:2b:6d:cc:c4:7b:
                    a9:a1:ab:6a:f0:5d:4a:c1:d7:d2:89:f8:f6:1b:1e:
                    5b:1f:77:c6:14:25:fd:dd:45:14:63:41:a0:6a:17:
                    14:72:70:2f:42:10:9f:5e:43:db:05:2d:f3:fa:ae:
                    ed:42:2c:bc:5b:28:46:fe:60:21:d5:7b:ce:88:89:
                    62:9c:e6:6e:b5:e3:5b:30:6e:cb:3d:4f:25:32:40:
                    4e:00:f1:6d:98:20:0d:9a:68:d1:ab:87:32:41:90:
                    a7:bf:a8:6c:88:3a:47:78:67:dc:34:74:7e:f0:b5:
                    cf:69:4e:ac:49:1f:e8:a7:f5:c7:ff:40:a7:20:86:
                    3a:33:a3:ca:c6:df:97:28:e5:61:fc:8c:9f:a3:89:
                    fd:4e:94:72:f6:67:6f:e3:30:8b:8d:7b:c4:eb:22:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:4F:1A:A0:38:24:D4:F3:44:6F:FA:F5:8E:63:F4:55:F5:5F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/b87dc33c-a70f-38de-b5cb-1097013fa7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:76c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:99:8c:be:04:e5:05:d4:bc:ff:9a:4b:59:94:3a:ad:5d:
         5f:57:00:88:b3:ce:c1:12:49:19:2d:b4:66:47:9a:8b:11:a0:
         bd:1b:10:9c:ec:84:57:0a:6e:a2:63:a2:fc:f7:d1:dc:15:99:
         56:b0:e7:5d:30:da:e5:18:c6:21:30:91:c4:66:45:7f:4e:95:
         b6:ca:62:89:1e:02:14:a4:a3:87:ce:a4:d4:39:91:56:e4:fa:
         ae:26:a0:5f:ef:95:85:6a:04:f1:91:f4:21:fd:6a:ec:26:e9:
         23:35:b4:c6:af:e2:6e:ca:91:4e:4f:8b:fa:a1:1b:1a:1e:9c:
         cb:fe:90:1a:9a:48:4f:aa:e7:6e:c1:99:1e:f8:aa:e4:57:0b:
         22:70:42:da:61:ea:e4:f3:67:99:70:23:04:be:8d:0e:b0:15:
         93:54:80:7d:6d:7b:11:ea:3e:6f:33:5d:b4:92:20:ab:03:70:
         a6:1d:6d:7b:42:d4:bf:fb:aa:45:9a:3d:5a:15:bb:fb:97:dc:
         ca:22:cb:6a:16:c1:6c:c3:8a:4a:1b:ac:42:3e:38:1a:1d:76:
         eb:b7:fa:1c:60:51:95:68:82:5c:f3:0d:b4:8a:ba:a5:03:37:
         a6:2b:f5:3b:04:9f:d1:3b:bd:69:9f:57:99:82:dc:5b:ff:c1:
         9b:fd:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:07:45 2025 by rpki-client