Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          opMbsvT58RaidmKpVfi57ci+NJlcjkETt4gDsyIHeGI=
Subject key identifier:   86:91:2D:C1:C2:6B:CB:73:AA:D6:81:39:AF:0B:B1:62:47:AA:ED:B0
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F4328584B2CF6E42F3F799AC839C491F0
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e4:2f:3f:79:9a:c8:39:c4:91:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=374c6a58-8e19-4258-a575-a166bc8c63a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:89:da:39:f3:88:49:11:41:77:c5:35:57:
                    65:30:c9:b5:2a:12:4d:31:d4:9d:c9:52:36:2e:d2:
                    7c:61:59:26:a7:92:ca:30:e2:e7:47:78:91:c9:07:
                    11:2f:a7:2f:70:7c:34:05:7c:38:fe:dc:10:b6:8a:
                    9a:56:05:e6:bc:9e:70:b2:7a:e3:03:c0:6b:e3:21:
                    12:d7:ba:a6:90:1e:31:d9:71:cc:ac:68:5b:63:d6:
                    01:d4:f2:83:ab:71:39:ae:b7:78:80:db:03:92:1a:
                    26:57:19:25:7b:89:93:43:12:7a:b1:e1:e3:64:db:
                    be:7d:8a:35:eb:ca:de:e6:6d:9e:0d:0e:38:96:8b:
                    0f:e1:83:bc:d3:b5:37:03:25:34:c2:e5:f1:04:bd:
                    8e:8f:c0:73:af:0b:98:81:6b:b9:79:b2:b8:19:ca:
                    6a:ae:c4:b1:c7:d6:a1:d5:ce:96:df:f5:44:18:e1:
                    a7:4a:29:36:45:86:cd:fd:1e:42:9b:bc:81:a7:07:
                    9e:0d:50:81:56:79:d4:78:3d:71:ea:1f:95:d7:9b:
                    57:24:ab:1a:5a:fd:17:48:f8:fd:8e:fb:49:a4:52:
                    53:5a:ea:4b:ad:74:d8:36:98:27:0f:b7:fb:d7:c6:
                    6e:b3:9e:c9:0c:67:dc:46:d9:4f:0c:fd:ad:06:03:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:2D:C1:C2:6B:CB:73:AA:D6:81:39:AF:0B:B1:62:47:AA:ED:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1a:4f:70:cc:3c:70:ff:46:18:d7:bd:52:06:89:9f:19:08:
         a3:70:10:6a:ef:61:db:17:ff:34:97:0d:53:0f:21:1c:3b:e8:
         05:92:f8:80:d3:46:c6:3a:f4:1d:99:63:d2:76:b0:61:96:49:
         e9:b6:02:4b:8f:71:dd:ef:d6:e1:19:f3:15:b8:de:c5:de:64:
         b3:b5:10:b6:29:95:4a:59:23:81:6f:b1:a0:70:64:bd:ce:e9:
         1b:6e:39:3f:79:6f:38:4a:67:d8:18:1e:f7:e6:ad:87:10:d9:
         f2:61:81:e2:c2:12:b1:c9:7d:b4:55:31:f2:2f:5b:34:e0:fd:
         b6:a0:d2:dd:6a:84:c5:37:df:e5:ac:0b:4a:35:75:c4:fe:25:
         d4:a2:1f:15:17:3b:73:1c:ef:ac:ec:e9:a9:76:24:ee:97:0a:
         e0:42:ce:a0:ff:b2:e6:be:6c:33:8e:ed:e6:a7:c4:00:f1:47:
         c1:33:e7:cc:ca:0f:80:ba:bb:ee:7d:c0:bf:2b:cd:06:f9:50:
         8c:f7:80:28:6b:5a:ae:e0:a3:0d:2a:d5:33:80:0f:2c:27:50:
         0d:49:85:ea:c6:41:7a:87:e6:02:c9:d4:29:5b:c4:f4:cc:9c:
         ba:90:3f:03:62:8d:c6:f8:f6:61:6f:f0:b6:30:59:62:7e:14:
         90:bc:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:40:16 2025 by rpki-client