Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa
File:                     81d7d678-588f-3bb0-afbc-4909e29f803b.roa (raw, json)
Hash identifier:          Q6GyQMcsI0SPEgoZ0Y8c4VdE1zgZyHZRDmDkaij32Lo=
Subject key identifier:   25:C5:49:77:D0:53:00:26:B5:DA:E3:C5:2A:1D:14:1B:55:8A:D0:8A
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584B1C36D162345D18D9CBB27D00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     20253
IP address blocks:        2606:bc40:f21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:d1:62:34:5d:18:d9:cb:b2:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c2255c32-bbfe-422b-b3d7-650c8abdeb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:e5:be:55:6b:e8:78:57:b8:cb:86:ff:55:
                    e5:63:6e:02:59:28:7f:5e:6d:04:0c:70:f8:04:11:
                    bf:de:51:0d:ab:66:84:67:4a:17:da:64:d7:57:bf:
                    b4:da:f4:e2:95:b4:48:7e:7a:73:df:31:3c:3b:83:
                    36:22:dc:71:b6:e9:ee:a5:8e:80:17:9c:49:88:e7:
                    51:6b:82:ff:4b:ce:53:a9:07:57:c0:2f:16:66:79:
                    3e:73:a0:e6:69:37:5c:60:a4:dd:c9:75:da:cf:42:
                    5f:bd:cb:b6:1c:38:3b:3f:5f:46:e2:f0:ad:77:6f:
                    4d:59:94:07:eb:e6:f5:4c:13:2f:2d:d9:60:2c:4c:
                    88:d2:64:9b:1c:d5:79:3b:f1:d0:a2:4c:9d:70:9f:
                    0e:d2:18:56:f2:a3:14:ec:93:62:00:6f:ca:ca:bc:
                    6c:b3:9c:c4:f3:c6:01:0f:02:9c:05:81:48:19:96:
                    f6:27:b7:77:c9:ca:db:d8:dd:8e:33:7f:47:f0:71:
                    71:c9:e6:a2:a6:62:17:dd:41:16:d1:a6:93:8b:2a:
                    71:9d:37:47:b3:fc:84:ee:86:27:84:16:76:eb:2b:
                    0a:67:9d:40:56:67:7c:c3:21:d3:77:62:50:20:b9:
                    8e:e9:c9:f8:7a:2b:3c:2f:0f:72:b4:ca:31:56:c4:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C5:49:77:D0:53:00:26:B5:DA:E3:C5:2A:1D:14:1B:55:8A:D0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/81d7d678-588f-3bb0-afbc-4909e29f803b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:e6:f4:d8:13:ff:51:43:d6:b1:17:d8:cb:a1:cb:c3:9e:
         4d:3f:c0:d0:1b:c9:38:59:4b:b0:24:4d:b3:0a:82:c8:77:64:
         8b:30:dc:1c:8d:e6:9d:04:14:03:56:aa:20:01:60:69:55:2c:
         40:f3:11:10:db:d0:df:f1:9b:66:e0:60:ad:e3:f5:15:ae:f5:
         ff:a9:b7:cc:d7:bc:ef:da:4e:3a:0c:64:1a:ec:12:d3:57:69:
         62:06:3a:44:06:02:52:64:bd:74:b5:cb:1d:fa:63:fa:26:5f:
         31:e0:d0:39:50:0d:db:bf:ac:fc:da:43:a2:23:2c:d0:d3:d3:
         f6:f6:fc:9a:43:fb:12:7c:ac:54:5b:cb:f9:4b:6d:50:f2:52:
         a0:ba:e8:e6:43:26:5e:29:b6:75:59:77:e8:ea:7a:23:f8:be:
         56:89:2d:20:72:72:50:2b:fc:fc:24:77:da:40:f5:73:84:ae:
         39:e8:85:f5:9d:bf:fd:fc:8e:3c:ce:63:fb:47:7e:84:d3:02:
         75:74:3b:8f:2b:cc:08:76:76:86:4b:0b:63:9a:ed:25:ff:e8:
         18:df:5c:3e:b6:b3:e0:08:7d:77:1a:be:db:91:1a:42:ad:49:
         88:79:42:d5:ea:66:0d:26:92:cd:5f:a4:2b:93:47:57:49:b1:
         79:2b:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:46:55 2025 by rpki-client