Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
File:                     a8ef8ebe-92a7-3667-b275-a0fed342786e.roa (raw, json)
Hash identifier:          CSVOomOuLERpLbbakCuZt9IE7gqagXUB2Q/LjCi/Jcg=
Subject key identifier:   07:72:D0:91:F9:CA:64:25:E3:E8:E8:AC:C1:03:07:62:D2:D6:3F:3A
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F4328584B1F0175D09C3EF21EC906A700
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     32554
IP address blocks:        2607:6b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:75:d0:9c:3e:f2:1e:c9:06:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=83cd14f0-306b-4c05-bb22-56aacd633bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:d2:29:fe:51:2e:dc:87:29:78:db:b2:8f:
                    c9:c6:34:6d:0a:07:20:33:83:40:65:12:a6:5e:86:
                    bd:57:47:bb:40:c1:dc:ef:92:c7:cd:42:11:e9:16:
                    70:c4:4c:02:34:71:85:b8:5d:9f:30:ba:23:cb:d2:
                    65:61:9e:7d:06:0e:a6:94:db:ad:51:8f:99:8a:c3:
                    13:0b:f2:43:a2:b0:ec:6b:d3:aa:37:79:30:0f:4b:
                    f7:20:c5:56:0c:db:84:dd:2c:63:15:09:a5:32:28:
                    24:3d:27:6e:d4:b9:8a:57:cc:0d:35:56:8f:32:2d:
                    00:e3:b3:c2:4d:98:01:13:02:12:06:2f:84:be:fd:
                    7b:1e:d4:b6:97:cf:ed:93:09:fc:c1:0a:2c:47:08:
                    c4:0d:88:bc:58:3f:33:f1:00:14:03:3d:54:f8:08:
                    54:10:23:db:4a:6b:39:13:df:b5:56:44:b0:9b:af:
                    cc:8c:7d:c6:a1:82:37:ac:4b:b6:f9:08:71:8d:ea:
                    b3:99:38:43:84:99:b7:61:13:b2:1c:44:84:4d:36:
                    8e:f7:ea:5b:4c:de:c1:16:63:23:d2:db:f2:7b:5e:
                    12:dc:12:cb:3c:bd:d5:de:31:77:fd:f1:5d:42:e2:
                    32:7a:d4:0b:09:76:23:1d:f4:06:ce:ee:0c:21:a2:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:72:D0:91:F9:CA:64:25:E3:E8:E8:AC:C1:03:07:62:D2:D6:3F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/a8ef8ebe-92a7-3667-b275-a0fed342786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:3a:10:41:25:6c:64:eb:d0:19:bb:21:36:17:a0:cf:ba:
         09:43:7d:b2:ff:50:ed:4d:2e:01:89:a0:7d:ff:29:0e:1c:7c:
         a9:61:4e:44:1a:d1:34:cd:bc:45:bb:e4:19:28:87:a1:38:86:
         45:d9:96:76:a2:3b:ea:0d:59:fc:39:0a:db:8e:61:3f:d4:60:
         d3:3b:20:79:16:37:04:ab:81:5d:25:a5:2f:09:1b:fa:7c:66:
         bb:af:a4:41:a5:1b:92:d5:68:e6:b2:96:80:5f:df:37:bf:69:
         91:cc:81:d8:ca:f9:df:b2:41:1c:a8:7f:0f:30:c9:e2:01:89:
         9e:78:3b:e0:93:df:7a:30:e2:fe:8b:e0:90:a1:66:53:7d:75:
         c6:03:b2:b0:e1:2d:dd:8a:90:a1:2e:a8:b1:87:b2:de:04:40:
         5b:19:ee:37:9d:49:3b:c1:a5:53:68:04:2d:dd:7b:32:09:15:
         51:57:2c:8f:97:9d:91:80:06:43:83:4e:e8:dc:2b:49:4d:7e:
         88:c0:3c:ec:2f:76:79:eb:43:67:1d:37:d6:79:aa:54:f4:87:
         75:be:55:14:49:93:eb:50:d2:6f:54:7b:bb:c7:35:87:79:91:
         6f:ca:1f:bc:bf:ef:cd:c0:11:e7:1c:c7:53:c7:a1:11:f5:cb:
         93:0e:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:56 2025 by rpki-client