Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
File:                     748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa (raw, json)
Hash identifier:          rrPeUoz1qG6h7kF7da9qTCboa+n3Hvr0qsd1BF0Bt5Q=
Subject key identifier:   9C:8D:C7:61:C8:19:2B:26:2C:37:C2:C5:03:DA:08:72:FA:48:A6:34
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584B0A115FB9074DB0B15EF46040
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     11260
IP address blocks:        2607:a000::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:b9:07:4d:b0:b1:5e:f4:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=ff1373db-70be-4383-8428-f6c367ea40c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:ed:db:ad:e6:13:44:5b:4e:68:71:0e:1e:
                    1b:08:47:6c:8a:72:83:e7:e1:2e:dc:a5:f2:c6:aa:
                    2c:94:64:9d:46:d8:66:9f:b5:e3:e1:fa:75:78:43:
                    0e:1e:0b:5a:be:c1:a9:41:dd:08:fe:15:2d:75:a5:
                    24:2d:6f:be:ab:1a:3c:6c:f6:f3:57:d8:43:ac:be:
                    1c:dc:11:5f:cc:b3:6e:c3:26:79:d5:2a:8d:fc:d4:
                    e0:15:dd:aa:ec:ac:70:db:8e:62:43:15:f7:38:91:
                    c5:5d:99:36:6e:84:81:d8:da:8d:53:57:eb:e9:d2:
                    16:47:96:88:e7:5f:9a:30:07:9a:4f:89:1a:59:2b:
                    ef:19:17:c9:57:0f:05:31:a1:8c:57:cb:a9:bd:f4:
                    d4:9b:8b:48:66:82:00:19:07:3e:be:a3:05:2e:61:
                    37:bb:cb:49:68:c8:a8:d4:4f:21:c6:c9:4f:a4:87:
                    b7:64:6a:1e:6b:dc:fa:48:7f:a1:be:d5:90:86:fd:
                    16:72:af:37:72:c9:92:43:b0:af:db:ce:0e:76:f5:
                    8d:83:9b:2a:9a:40:24:f4:97:d7:b0:98:e9:ae:dd:
                    58:03:be:c7:f1:8a:92:f0:b3:70:e7:cb:59:33:bf:
                    8e:b2:ec:7d:78:e0:67:d2:36:68:b5:84:c9:9b:e8:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:C7:61:C8:19:2B:26:2C:37:C2:C5:03:DA:08:72:FA:48:A6:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/748d109b-49f1-38ef-9ca5-cc9d24c8fe96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:18:c5:e1:36:72:f9:23:f7:09:ee:51:12:18:21:6b:16:92:
         59:1e:f4:eb:9d:6a:6a:18:4d:30:6d:ac:46:92:14:88:92:9b:
         54:3b:1c:f0:12:49:56:21:71:ce:cf:c1:7e:9e:2d:eb:1b:71:
         e9:14:83:ed:21:3f:7b:ee:05:f2:69:09:99:a1:df:a1:1e:1e:
         89:73:88:8b:32:16:34:1f:9d:af:86:d0:37:88:66:75:c8:1b:
         45:19:cf:66:2e:fd:26:fb:3b:66:1b:9d:22:31:84:2a:6c:de:
         80:da:ef:52:24:17:3d:6a:dc:e4:d1:91:2f:cc:d4:be:ce:cd:
         3d:97:11:42:16:86:7f:ec:4c:e7:d1:11:7e:f1:66:79:d3:0d:
         41:1e:11:5e:6b:56:45:29:f2:f3:c5:c9:ca:e8:d6:de:ea:71:
         6d:a6:5c:ef:2b:38:d9:2e:df:df:83:34:76:93:a7:1a:70:94:
         da:b4:ff:98:9d:8f:d5:80:92:0f:a2:ec:58:40:cc:b6:b5:48:
         83:ce:f4:2c:c6:0d:e0:85:1c:5d:27:57:ce:6c:a8:95:c1:28:
         fd:9a:13:c0:51:92:3e:47:f4:dd:d3:12:43:15:25:76:90:d7:
         2f:aa:8b:68:f9:8d:ac:35:72:cd:97:c3:71:b4:ab:9d:90:71:
         66:a2:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:11:34 2025 by rpki-client