Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa
File:                     b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa (raw, json)
Hash identifier:          lK6X/GcWQJmwYF/9prFsaEL85X5IzokZewmpeaB/gcY=
Subject key identifier:   2E:D8:A5:03:FB:1C:E5:79:CC:17:34:34:A7:B8:AC:BB:68:0D:BF:CE
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584B6BC75A45031016210481E1A0
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     13335
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5a:45:03:10:16:21:04:81:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=8e9864d0-330d-459a-993b-b8037661f2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c9:6d:91:38:f8:07:29:ef:c0:cc:a9:e1:50:
                    75:d1:50:a1:66:8f:66:97:1a:43:db:4d:c3:2f:16:
                    34:0d:a7:19:50:4d:b8:ea:33:b0:d1:1b:74:38:b6:
                    b5:05:cb:3c:1c:8f:c3:cb:37:f4:04:ec:e1:8f:82:
                    7a:16:46:5b:32:81:50:18:47:61:51:54:b3:e7:22:
                    e6:33:de:8d:80:9d:4c:3c:84:34:13:db:0a:fd:49:
                    df:9d:17:57:d5:ae:16:d0:84:53:f4:26:d6:bf:25:
                    2d:4f:cd:ea:fc:87:2f:ae:d6:7c:19:9f:a7:84:c3:
                    b1:ef:02:9c:a8:d6:0b:ae:ce:db:e0:c7:78:21:24:
                    c9:41:24:6b:9f:29:98:08:c4:f2:78:64:6b:76:c0:
                    6a:47:b5:31:bf:cb:d0:61:dd:06:1d:ef:4e:ff:a9:
                    89:48:51:eb:c8:38:f1:eb:02:3b:f7:36:3f:9e:1d:
                    81:af:e0:86:29:c0:28:9b:7a:4a:e7:f9:74:cd:4e:
                    5a:b0:7f:d5:90:a3:a6:4a:f7:98:83:44:d0:0a:e7:
                    e6:ab:61:0e:cf:7c:59:f1:4a:0c:65:d3:fd:48:ee:
                    64:cd:79:3b:43:ec:8d:6d:76:b3:c6:01:c8:07:d1:
                    80:4e:81:13:b1:49:cb:ff:24:a0:60:65:33:0d:05:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D8:A5:03:FB:1C:E5:79:CC:17:34:34:A7:B8:AC:BB:68:0D:BF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/b1e7b3ba-e1a8-3371-9e60-cc480edcaf37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:3f:77:f5:c4:d2:cb:7f:4c:df:b6:63:7a:7f:53:99:8e:
         37:09:ea:f6:85:6f:c4:a5:60:b9:a2:e5:b5:f9:ce:b5:b7:a8:
         c6:2c:6e:57:12:f3:46:65:29:33:4f:d5:24:a6:7d:3f:81:06:
         93:fa:e3:4c:90:f8:02:c0:86:43:04:ae:a3:43:19:ac:51:f0:
         85:1c:c9:51:a1:55:3d:6f:01:b6:fd:0c:3d:b2:5e:ea:38:8f:
         e4:45:7e:a6:07:82:d2:20:2d:d7:7d:37:00:9a:ab:7c:1e:7d:
         6b:db:f4:1b:c3:4b:62:6d:a4:be:49:ad:0d:79:b5:db:7a:e1:
         41:86:1c:a3:43:fd:a5:eb:d8:bb:09:2e:f0:a8:e8:ec:33:a7:
         d9:62:85:90:65:06:b9:71:f6:6d:fd:04:9a:db:14:dc:cf:f5:
         b5:91:18:b0:6f:ae:62:d9:e9:d0:b0:17:87:5f:65:5c:15:2a:
         7f:96:d2:ef:b0:20:05:5a:8b:5c:af:b6:c6:c5:ed:d9:da:39:
         eb:4c:f5:27:93:da:f1:f7:5c:a9:10:04:e0:d6:bf:03:a6:a4:
         e0:41:54:43:d9:e2:84:e3:cd:8d:f1:e2:80:27:85:60:85:95:
         e5:e1:11:77:94:4b:5b:77:43:18:b8:e7:7f:c2:57:f2:bf:b0:
         b3:57:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:06:20 2025 by rpki-client