Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa
File:                     ca80a34a-01fd-39d7-96cc-4e059275a53c.roa (raw, json)
Hash identifier:          aV0r19U1gk/jPs6a5/fk/pfkwuwpLLUQNjxcBouynko=
Subject key identifier:   DB:C4:74:D6:5D:91:D4:BC:B3:C3:AC:CE:1D:55:CA:CE:41:ED:71:7D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B4E770C84BD84FDCFA0F3F500
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     6128
IP address blocks:        2602:230::/32 maxlen: 32
                          2607:fda8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0c:84:bd:84:fd:cf:a0:f3:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=13253147-a32a-4aee-95c8-ec58303eb5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:50:0a:28:07:61:12:ea:47:5d:36:5e:49:
                    f1:85:2a:4b:cf:48:fe:a0:97:3c:98:83:6c:8e:fb:
                    e1:9f:25:e0:99:fd:5e:2c:64:38:ee:16:3e:31:d5:
                    74:cd:a4:aa:56:ed:e9:81:70:35:d0:79:d9:18:a1:
                    64:2b:32:18:2f:4a:e4:7c:b0:c3:d7:b5:84:01:03:
                    e2:2a:28:ba:77:20:2b:12:98:1d:df:6f:4c:b0:ff:
                    fe:fd:21:ab:38:30:f5:71:2c:e6:06:2f:57:00:d1:
                    59:63:4c:26:f3:b3:a9:d8:4d:77:37:34:b6:45:18:
                    a0:b8:5a:af:e4:1f:1d:93:df:57:86:3f:f2:ec:7d:
                    0d:de:4b:de:20:ca:70:83:90:22:34:a9:30:f9:b2:
                    ec:10:a4:83:24:a0:60:a1:0e:24:89:ae:62:7e:4d:
                    21:a8:64:15:22:1f:31:ca:f2:38:47:68:c1:98:9b:
                    65:82:92:9f:d2:9f:37:6e:c6:d2:06:85:60:25:6b:
                    0e:df:f4:3a:94:ac:52:85:b5:e6:8a:73:c8:3a:75:
                    ba:6a:72:41:6f:13:29:df:0d:0b:cd:cb:fd:92:e7:
                    51:2e:fd:a6:00:bf:ce:43:59:bf:19:ce:e9:56:14:
                    e3:5d:68:84:42:74:23:32:d2:2d:e0:c5:ff:50:2f:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:74:D6:5D:91:D4:BC:B3:C3:AC:CE:1D:55:CA:CE:41:ED:71:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ca80a34a-01fd-39d7-96cc-4e059275a53c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:230::/32
                  2607:fda8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b4:fd:ef:89:dc:ec:cb:4d:c1:05:2b:e1:e1:54:1e:0a:6d:
         1b:f0:fe:9f:10:72:48:43:25:e0:4a:71:5a:22:a1:27:3e:d8:
         52:06:fc:ae:16:03:b1:63:c4:6a:33:58:95:00:ba:fe:d4:53:
         fc:9c:3b:97:39:04:72:ac:42:49:81:19:8f:06:19:94:6e:25:
         f8:54:92:e2:d3:45:83:a0:1b:6f:f4:30:33:e3:5b:3f:cf:bf:
         6f:11:00:7a:e9:5f:ff:01:35:e1:b0:8c:78:96:69:f1:09:09:
         6a:a9:b3:fe:e6:d7:76:db:0d:d6:04:14:5e:63:ea:3a:55:1b:
         88:4a:76:77:b7:28:0f:79:ad:b1:e0:67:43:4a:58:5e:b8:28:
         91:3e:b2:b6:2f:c9:fd:90:f7:11:52:b8:fb:e5:f0:c2:ec:05:
         06:40:9a:7e:b6:f0:22:b7:96:15:4e:dd:09:5b:80:fb:cb:b7:
         c4:4d:93:9f:4d:11:c3:cf:5e:96:47:1e:ac:9d:7e:b9:d6:9e:
         93:7d:e7:b2:d6:f1:b2:1c:22:dc:94:bb:28:42:43:d5:7e:05:
         59:ff:c6:42:98:1d:2e:c6:d0:ce:74:11:46:46:92:7f:57:f4:
         06:e3:95:36:00:70:67:42:1f:81:71:5c:87:96:a2:bb:bd:43:
         11:d2:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:06 2025 by rpki-client