Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/1cafe6e8-a237-38f3-aff9-0de8c9c6fa16.roa
File:                     1cafe6e8-a237-38f3-aff9-0de8c9c6fa16.roa (raw, json)
Hash identifier:          acJzwmH7i6m2SaNiCiwZKvdlpVRSwzmqXWZe7Htgc3M=
Subject key identifier:   20:FF:BC:46:68:B8:B0:DC:FD:34:C0:B6:15:8D:6F:3E:1B:5A:72:CF
Certificate issuer:       /CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
Certificate serial:       010D0C9F4328584AFF2DA0FCD814CFB577AC05A0
Authority key identifier: 7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/1cafe6e8-a237-38f3-aff9-0de8c9c6fa16.roa
Signing time:             Wed 27 Aug 2025 15:23:50 +0000
ROA not before:           Wed 27 Aug 2025 15:23:50 +0000
ROA not after:            Tue 25 Nov 2025 16:23:50 +0000
asID:                     11588
IP address blocks:        2631:4000::/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ff:2d:a0:fc:d8:14:cf:b5:77:ac:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6
        Validity
            Not Before: Aug 27 15:23:50 2025 GMT
            Not After : Nov 25 16:23:50 2025 GMT
        Subject: CN=d359a7fc-140a-4f2f-97ae-83456491390d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:a8:42:b5:a1:c6:53:65:2f:e7:94:54:fa:
                    cd:a0:e2:0f:84:14:b5:49:c0:c8:a6:57:b9:84:4e:
                    64:1a:a2:8f:1b:de:1c:12:8e:c1:1a:ba:15:30:87:
                    97:25:4f:36:53:54:0f:11:86:f6:28:43:45:09:6c:
                    0e:f0:dd:af:aa:44:61:28:b7:f6:eb:9e:85:75:1f:
                    dd:32:57:13:f7:e9:b2:86:91:36:07:a3:18:bd:67:
                    c1:ef:68:04:05:c0:01:78:ae:b1:90:fd:61:d4:14:
                    d4:17:52:5c:4b:c8:95:3b:3e:e8:dd:10:53:c1:59:
                    05:91:5b:1a:b2:5d:09:ec:59:c4:b1:a6:db:d8:22:
                    53:1b:80:93:bf:b4:40:5a:88:a9:11:62:34:88:82:
                    5f:b7:1b:7d:88:3f:c6:6b:21:b9:44:c0:c4:51:08:
                    a9:e0:61:5d:d5:0c:1f:c0:cc:55:2d:c2:6c:df:07:
                    5d:fb:d7:3f:9e:8a:f7:41:b9:0a:d0:84:af:c8:5a:
                    40:d6:e2:d6:0a:0e:84:c3:ef:59:14:f8:b9:50:34:
                    25:af:5f:39:a6:05:b0:de:f7:9d:f8:8c:db:a2:77:
                    a5:4b:6b:32:52:5f:6f:a6:38:6d:78:a1:8d:1a:ad:
                    0c:7b:b2:39:55:ac:43:01:68:22:ac:9c:46:65:2b:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FF:BC:46:68:B8:B0:DC:FD:34:C0:B6:15:8D:6F:3E:1B:5A:72:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/1cafe6e8-a237-38f3-aff9-0de8c9c6fa16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F6:81:2F:D4:09:FD:0B:38:E3:3B:AC:9E:93:A2:B4:99:B4:C6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bcb36a7b-bf3c-4a81-8c5b-a48d1a57d2d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:4000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:d5:c8:04:fb:f6:fb:39:df:2f:84:30:52:13:a8:e6:29:
         18:a2:81:e5:86:40:15:77:cd:dd:3d:42:f9:12:78:55:9c:ec:
         2d:54:29:7c:1e:8f:ed:a4:c7:84:5a:99:f1:bc:fe:15:c8:fa:
         04:51:90:92:6f:d8:d0:5f:bc:49:37:e3:c5:ce:4e:4d:fb:98:
         2c:2d:31:42:fd:e4:07:89:5f:a9:53:14:f8:b9:80:55:73:6b:
         7a:b3:26:a8:45:63:e7:09:91:e9:bf:36:e9:4f:04:92:21:fd:
         cd:05:60:ee:a4:c1:c0:3c:c5:da:b2:79:2d:12:5a:b8:93:b9:
         7c:64:11:b1:70:fa:a1:18:b7:f0:fe:9e:bb:90:ce:2b:61:bb:
         f6:fd:d4:f2:a1:c8:af:02:1a:de:2b:86:eb:a1:65:e5:f7:8c:
         4e:e0:d1:62:23:ca:83:68:b1:e3:50:3c:e9:8f:0d:07:8d:15:
         54:7c:a9:2d:16:5c:39:92:8c:df:88:f1:a4:6d:44:cb:3c:e5:
         97:92:2e:06:87:5f:dc:9c:eb:fe:de:41:c0:08:d0:25:fa:0d:
         03:e0:f3:c3:78:57:d0:0b:3f:a2:19:75:58:2a:87:ce:e9:7e:
         a0:ef:a6:d9:db:db:f7:f4:c0:09:e2:69:9c:c2:8d:35:4c:c6:
         6b:8f:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:19:03 2025 by rpki-client