Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa
File:                     8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa (raw, json)
Hash identifier:          Q7C7Iqtb4bQsUWgjc2cwdNH7gj8RShN4rjaZfQQ3qP8=
Subject key identifier:   0F:6A:8F:58:01:1A:4C:09:D3:16:E3:19:F7:5F:AC:FA:C3:68:B8:6E
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584B05E13DE094CBB5E29E0BE780
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     215190
IP address blocks:        2607:eb40:6974::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:3d:e0:94:cb:b5:e2:9e:0b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=1ab27428-228f-4a90-a23e-2713f200f347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:b9:d9:cd:5f:a3:c4:1e:ff:4c:80:9d:47:
                    3f:21:5c:db:3a:76:16:26:f6:6c:a5:da:db:e6:cf:
                    3e:65:17:c6:cb:85:ae:75:81:56:95:52:2e:e6:68:
                    25:e6:d8:e0:16:60:15:01:d3:9a:a9:59:0c:fb:e1:
                    2a:75:a7:e2:bb:e3:6f:c9:03:7c:b0:ee:67:19:da:
                    73:40:ee:38:31:4d:14:f3:93:7c:d0:27:2f:6b:66:
                    cd:d1:0d:2d:93:40:7f:18:47:a1:f3:0b:c3:35:47:
                    2b:54:45:e3:58:75:35:0e:f4:74:8c:f4:fc:76:e5:
                    07:4a:49:77:b8:4f:b8:a1:e6:6a:b4:d6:83:cb:cd:
                    24:61:a8:bd:af:00:ff:8b:00:bc:bc:f2:17:c3:98:
                    26:5b:e4:af:e4:fb:e5:11:85:9e:87:ef:a1:fe:a6:
                    a0:8a:e1:9f:32:fd:9b:d8:c3:74:63:23:2c:5e:62:
                    36:57:6c:06:58:b9:60:2b:a4:2e:26:bb:d3:6c:89:
                    59:43:38:8e:c8:93:6e:8b:53:63:1b:79:60:fb:ae:
                    7d:94:d5:20:7a:6e:2f:77:89:3e:e2:d0:44:44:bd:
                    e3:eb:e0:4f:08:4d:08:f2:37:47:eb:56:ac:bc:3b:
                    16:bc:1b:99:fb:6c:ea:d0:cd:d6:3a:2b:0d:1a:ec:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6A:8F:58:01:1A:4C:09:D3:16:E3:19:F7:5F:AC:FA:C3:68:B8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/8d63bb7d-2a0f-3f7f-a5b2-5fa09927fa7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:6974::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:9c:c3:d4:af:31:67:c9:34:29:f9:0c:2b:19:31:d9:7b:
         4f:2b:e3:86:f4:78:97:cc:ba:af:c3:6c:88:96:76:a0:57:c4:
         0c:cf:80:52:e5:d7:cf:53:fb:82:46:4a:cb:ba:eb:9c:0c:2c:
         53:ef:27:6c:16:c9:6a:04:c7:28:1d:52:39:d9:f2:01:65:52:
         01:76:96:89:c8:f6:34:ff:d3:ed:c4:eb:d7:fe:d8:73:f5:ce:
         24:22:a9:7d:ce:c1:3f:6a:cb:4d:d3:f3:e8:f5:01:0c:74:f0:
         e5:91:ac:e0:70:06:26:33:9d:9a:b4:c2:82:24:29:58:74:2d:
         cf:be:3c:01:3b:c4:0b:ef:3b:b1:19:b9:a6:b1:b8:45:1f:63:
         67:5c:cb:0d:6b:d0:0d:71:35:2c:5f:13:ca:a2:e0:af:f7:71:
         69:7e:9f:19:ec:a3:16:2d:9f:b9:0a:3c:55:74:fb:be:31:c2:
         81:a1:0f:60:9f:f9:68:e3:1a:ec:68:60:b4:34:12:82:c0:93:
         d0:b1:7e:32:54:68:90:bd:bf:9a:10:d6:eb:fd:7c:07:22:15:
         29:df:e0:06:57:d5:cc:67:9b:53:dc:38:ac:a9:db:00:ee:5f:
         60:6b:24:28:b5:9d:1a:30:74:26:0d:8b:b3:9f:80:6d:87:5f:
         a0:e6:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:06:43 2025 by rpki-client