Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
File:                     7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json)
Hash identifier:          66HTL/uE472Lc6OMiZm65Ar4ytzVMcq7l6a4sYIdhvU=
Subject key identifier:   36:F3:3C:39:DD:7F:E4:63:57:55:A2:94:7F:C7:A0:B7:4D:19:17:83
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584B1AD17DD719097C4EAC6D5F80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     21949
IP address blocks:        2606:880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:7d:d7:19:09:7c:4e:ac:6d:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=de8b09b3-ac5f-47b9-b5f9-5e7fd4aaa1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:ae:b9:80:cf:3e:7d:e4:55:d0:8b:7e:58:
                    93:30:ea:7a:ff:a9:77:30:e2:8d:39:51:02:28:35:
                    1b:eb:98:cf:e2:4c:f5:98:d9:a5:85:39:c7:b6:bf:
                    9d:b4:bc:09:bb:a9:d2:e3:11:26:d2:ae:34:eb:24:
                    c3:d8:c3:3f:ea:3e:40:6a:ac:a8:b3:ad:af:d2:da:
                    ab:b3:b7:b1:18:89:48:75:39:92:46:f8:a7:0b:e5:
                    33:2f:f4:9f:0e:4d:2d:a4:ab:9a:84:f4:59:ee:c2:
                    72:b3:27:8c:6e:cf:22:c7:0a:69:cc:3a:a0:b9:c6:
                    b6:93:fc:b1:a0:9b:da:1e:b4:e1:4e:71:08:43:cb:
                    29:f2:83:61:88:bc:c7:64:b2:28:08:0e:ba:c8:93:
                    06:b5:bb:69:05:44:f9:8e:c4:9d:61:a1:de:e3:13:
                    d7:1e:3a:6c:5d:2a:5f:bc:da:5e:45:91:08:70:24:
                    93:66:40:e9:df:fa:c4:1a:76:ce:e9:d0:dc:1b:4e:
                    d3:3c:f6:d2:63:35:13:c1:aa:59:6d:5d:3f:28:de:
                    ed:6f:34:7a:ce:52:e2:75:95:23:30:0b:0c:29:4c:
                    61:e7:44:6c:a7:4a:79:4e:bc:ce:41:ec:28:e9:21:
                    9a:40:06:0f:fe:59:6c:cc:ae:f3:c5:66:88:a3:ef:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:3C:39:DD:7F:E4:63:57:55:A2:94:7F:C7:A0:B7:4D:19:17:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:b4:89:e3:79:7c:8e:2f:83:b7:d8:61:0d:46:3b:81:db:
         9a:93:5e:66:17:50:92:6f:65:1a:63:82:2f:e9:1e:9b:56:dd:
         e5:25:27:58:fd:a4:7d:a1:b3:c0:f6:e7:31:3c:69:12:c9:eb:
         8c:15:c8:b3:6e:a4:8e:f3:99:f7:5d:94:15:be:3b:bf:19:21:
         d4:c3:09:14:95:70:f5:5b:8c:6f:31:ef:76:13:dc:53:b3:67:
         86:21:cf:89:2e:d9:2b:6b:c8:28:2a:7b:48:7a:3a:46:6f:65:
         4c:b1:2a:ac:d9:d6:a9:eb:07:06:cf:cf:c3:2d:05:d0:e4:58:
         5f:91:df:a2:c9:82:af:df:f7:bc:26:16:2d:e9:59:12:30:c5:
         42:80:1e:27:d6:9d:da:4d:70:8b:10:8c:69:4f:de:ee:6e:32:
         37:36:34:de:7f:28:57:1c:4f:17:66:f4:88:31:59:0b:1b:86:
         d8:ab:cb:64:34:20:76:66:16:9d:bb:6c:ee:23:bd:96:70:55:
         61:ce:7a:88:40:76:85:7a:b1:44:e3:e7:2b:b0:7b:c3:11:f7:
         d1:9a:23:dc:93:47:d6:9d:ea:e7:f7:cb:18:c7:a1:13:c2:15:
         54:5d:ba:0e:52:4e:b1:79:40:d9:49:05:72:0c:95:61:f1:fc:
         d3:aa:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 17:10:51 2025 by rpki-client