Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/bdf14fdb-87f9-3341-8368-1632cae5e9c7.roa
File:                     bdf14fdb-87f9-3341-8368-1632cae5e9c7.roa (raw, json)
Hash identifier:          d+HTHvCKMly4bPy7JbK9RiU0fnPmuyiHr3hQAnulZq0=
Subject key identifier:   33:95:E2:EA:4B:2B:3D:E0:40:5B:F6:49:CE:4A:ED:FC:85:7E:74:71
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584B4D11D3CBDBAEC0B1AD1BD6A0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/bdf14fdb-87f9-3341-8368-1632cae5e9c7.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     19122
IP address blocks:        2605:9000:c::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d3:cb:db:ae:c0:b1:ad:1b:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=cde08f5e-54bc-4935-851c-ca32c7c628e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a0:77:d3:22:33:87:a4:d7:c9:cf:b4:bb:f6:
                    73:07:c1:0f:e3:63:5c:fa:8e:1b:a8:5f:70:2d:81:
                    27:28:ef:cd:16:75:db:7b:5e:c7:7b:67:f1:e5:13:
                    d4:84:b5:7a:56:69:58:4f:40:52:c4:9e:1e:b2:98:
                    6a:61:5e:88:70:74:dc:bc:37:11:64:f5:df:1d:fe:
                    3a:b3:ce:63:9c:4f:37:29:e7:e7:59:cf:42:3f:dd:
                    a3:52:32:98:d1:12:83:cc:f5:ad:3b:3d:a9:77:9d:
                    a4:4d:24:2a:83:cb:2c:da:2d:85:a0:7e:73:7f:36:
                    1b:cb:00:fb:c5:8f:b7:2d:b1:0f:10:93:ae:59:27:
                    02:d3:67:d0:eb:70:cf:f5:47:2c:d1:74:a1:6b:14:
                    89:6c:ce:fc:93:77:9a:cf:9c:12:82:0c:77:3b:27:
                    ad:d2:31:9f:51:bb:45:df:43:84:91:40:ff:38:e0:
                    95:3d:f9:64:f5:cb:8a:2b:59:99:c1:bb:d1:9d:b3:
                    3f:07:f8:13:b8:65:6c:16:cd:6f:4f:6b:a4:ee:66:
                    41:b4:3f:51:1a:02:8c:e1:0d:c0:43:1f:a0:47:ad:
                    e4:18:27:58:b3:2b:d9:0c:2a:9f:4a:2f:89:b3:e1:
                    a5:51:8e:73:d2:db:83:da:2d:4e:a4:e2:d7:b9:cf:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:E2:EA:4B:2B:3D:E0:40:5B:F6:49:CE:4A:ED:FC:85:7E:74:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/bdf14fdb-87f9-3341-8368-1632cae5e9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9000:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:85:fc:b7:e4:a1:dc:91:dc:66:98:21:7e:8d:ee:d6:c6:
         fa:34:e8:b3:ab:25:98:a0:7c:5b:a3:54:fa:a5:89:99:fa:92:
         b7:a8:8d:bf:18:6e:8b:2c:45:fb:28:b6:31:7d:59:dc:bb:0c:
         4a:27:15:44:bb:3c:fc:b7:3a:69:49:47:65:ba:f3:d0:28:0e:
         3b:89:e3:37:61:4f:79:d1:61:86:92:45:03:74:65:a3:24:c5:
         8a:fc:05:ab:ca:63:0b:00:e7:17:73:57:36:98:22:6d:54:7f:
         48:f3:38:8e:9d:6a:c5:48:f9:04:49:24:d0:0a:94:08:ef:f5:
         3a:14:73:72:6b:fd:4e:22:9d:f9:78:f6:03:9c:67:94:50:8a:
         1e:d3:0f:7a:25:5f:f0:56:36:21:5b:02:82:85:bd:61:3c:e8:
         92:74:41:53:bc:ba:7f:9a:f5:0c:5e:6c:bf:58:74:ec:df:c2:
         f9:71:c7:20:7a:9b:4c:4d:4e:02:6b:fd:62:f2:86:45:a9:fb:
         33:ab:4f:3e:e8:23:18:9d:f9:ca:dc:8b:3e:4d:9e:43:ba:7b:
         86:1e:8e:23:4b:76:e0:f0:84:e4:86:4b:c9:10:cd:6d:8d:c9:
         53:0b:e3:83:ae:a0:2e:cc:e3:a5:62:b8:8f:4f:ff:c8:ba:c3:
         86:9d:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:33:55 2025 by rpki-client