Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa
File:                     ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa (raw, json)
Hash identifier:          C4I6ECaUPJLo0demrw1SrBALhIgT2Z5BnO656UJ3Xsk=
Subject key identifier:   DA:4D:06:C1:89:5A:1D:38:F9:61:02:E3:B7:6C:A4:5E:80:AB:00:CA
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584B2B649F2EE30152EC7880B480
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa
Signing time:             Fri 12 Sep 2025 11:30:12 +0000
ROA not before:           Fri 12 Sep 2025 11:30:12 +0000
ROA not after:            Thu 11 Dec 2025 12:30:12 +0000
asID:                     20454
IP address blocks:        2607:6003:2100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:64:9f:2e:e3:01:52:ec:78:80:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 12 11:30:12 2025 GMT
            Not After : Dec 11 12:30:12 2025 GMT
        Subject: CN=f137fe01-5e0f-4470-99ed-09c79cc30c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:99:6d:5f:ff:6f:e5:2d:b6:f9:76:70:30:
                    81:74:d1:db:1c:12:80:ac:5e:ba:2d:d0:fb:37:b7:
                    ba:b4:34:44:89:8f:37:0b:d3:24:77:15:6d:5c:74:
                    49:19:c0:ba:c2:28:ec:80:9b:b0:43:88:4c:4e:5c:
                    28:4c:5d:c1:d3:78:35:81:3c:e0:d5:8f:bd:15:a4:
                    cb:f2:29:72:ed:bd:f9:ca:b0:47:16:28:b6:e7:b7:
                    9c:ce:be:dd:68:d6:ce:72:a8:a6:81:86:79:64:d7:
                    18:f2:a8:98:7c:7a:12:37:31:b8:0f:3f:11:27:f1:
                    68:fd:21:40:72:d8:85:76:1c:50:ca:85:c9:db:81:
                    cd:74:78:cf:9d:d3:d6:e8:3a:d8:da:94:a5:2f:b0:
                    b5:b4:e1:8c:15:e9:07:a5:58:4c:4e:47:81:86:d7:
                    41:89:66:6d:e4:c1:97:4b:95:7c:de:73:47:fb:e5:
                    a7:1e:57:d5:78:e1:9d:db:6d:41:67:51:23:1f:f2:
                    5b:57:92:6a:c4:3f:4d:31:24:c8:6a:29:53:ee:2e:
                    ec:bc:59:5a:af:4b:6a:d7:ee:02:ec:31:b6:b2:be:
                    98:15:9d:c2:6f:32:ff:ed:a9:7e:4f:77:f6:8f:4b:
                    04:03:50:d6:60:ea:45:2c:e4:06:b0:65:78:eb:89:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:06:C1:89:5A:1D:38:F9:61:02:E3:B7:6C:A4:5E:80:AB:00:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ec02acb6-ad92-3f9a-91ce-d92c5193cf0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6003:2100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:86:ae:5e:55:ab:c7:71:0e:86:8c:05:52:de:31:0b:60:d3:
         e4:e6:42:4f:82:d8:8d:ec:70:ac:71:82:14:7f:67:7a:7f:f3:
         a1:fd:e0:65:d4:9f:5f:b5:5b:d7:cb:4b:c1:0b:5e:b3:47:5f:
         32:56:63:33:83:ee:d6:99:89:05:8e:b8:9c:0a:48:8e:7f:bd:
         f4:fd:6f:43:f4:fb:2c:ea:48:29:66:71:19:3e:16:63:d0:c3:
         9b:a2:b0:af:d7:0f:0c:e2:fd:be:38:2d:2c:71:70:2e:97:d4:
         1f:ef:4c:ba:b5:20:60:6c:a7:97:4c:6f:b7:a8:e3:cc:e6:38:
         9a:23:f9:91:ff:ab:2a:64:02:d4:5f:5a:01:2e:15:e4:e6:5b:
         6b:4d:1b:ea:b2:a4:68:5b:4d:bf:61:ff:35:27:17:29:c7:7d:
         d5:24:00:0a:cf:cf:c7:e3:9d:36:3a:dc:e4:23:ee:dd:7b:e1:
         32:8c:d2:9e:89:ef:c7:84:55:bf:84:2b:0b:44:f9:f6:55:f8:
         9b:d2:d5:0c:8c:11:11:14:85:6d:85:de:bb:7d:2f:a5:ce:66:
         a2:fe:09:6f:ea:67:65:3a:cb:c3:30:ff:e9:44:c8:40:75:d4:
         0b:00:82:5b:ba:22:a2:d7:bd:ed:a5:9b:6a:86:27:66:97:2c:
         c6:30:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:10:47 2025 by rpki-client