Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
File:                     b465a98c-c874-38a4-b591-0a2be8ee676c.roa (raw, json)
Hash identifier:          bKgpvq4Z7mvWEh+vdd53UBtm3JbzFM1TzMSxt/V6RnA=
Subject key identifier:   AD:4D:3E:14:47:B0:1E:9E:4A:31:07:24:40:BE:11:F8:99:B8:2F:76
Certificate issuer:       /CN=b06aad26-b91f-432b-94ca-bf78ffe68996
Certificate serial:       010D0C9F4328584B328C3B4BE495744AC425D200
Authority key identifier: 42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     14183
IP address blocks:        2620:e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:3b:4b:e4:95:74:4a:c4:25:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06aad26-b91f-432b-94ca-bf78ffe68996
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=81ac4c94-e30a-47c3-a687-1c929967a031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:68:08:33:3b:60:a1:7d:6f:9e:0f:d0:7e:
                    4e:31:dc:1b:c1:48:ab:cc:fe:28:bc:2c:a4:a4:26:
                    5a:60:9b:b1:67:3e:a1:ae:96:10:fa:34:75:93:3e:
                    b7:68:38:b4:ed:3c:9c:5b:bb:f9:f1:08:4a:e3:ed:
                    56:69:30:71:37:33:50:a5:f7:2e:94:73:18:66:79:
                    ea:83:1f:fd:43:90:88:c8:98:df:88:6a:f3:05:d0:
                    8f:1e:ab:90:19:d2:e3:b3:3e:e1:6c:11:8d:7f:59:
                    49:af:96:73:d6:9a:d8:ea:a4:32:f2:c9:21:8f:d7:
                    ef:ae:84:dd:49:c9:2a:e6:b6:3d:b1:b7:b3:9d:e3:
                    3f:a1:a1:13:5c:0e:49:ac:59:96:b7:1d:44:93:09:
                    ad:ad:7f:b6:db:c1:8d:d9:0c:7d:b1:f9:5e:2a:d2:
                    34:d6:0d:07:a6:44:c6:42:4a:a6:f7:14:7a:b9:3a:
                    6c:6e:8c:81:7a:af:34:ac:1a:4d:b2:6f:9d:f6:5e:
                    a9:63:6a:c0:f0:e0:54:18:f9:1b:1a:95:7a:e8:93:
                    e8:a2:b4:da:5b:9d:9b:b4:f0:b1:db:ad:05:f9:2a:
                    ef:b7:50:83:5a:88:96:42:1a:97:b5:12:63:7a:cb:
                    cf:49:cd:93:e0:23:9d:1b:90:a4:81:3b:d5:37:be:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:3E:14:47:B0:1E:9E:4A:31:07:24:40:BE:11:F8:99:B8:2F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl

            X509v3 Authority Key Identifier:
                keyid:42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:39:d0:67:c2:36:5a:2c:09:e8:4b:63:7b:26:a5:3b:e7:
         bf:86:3c:70:78:26:96:02:b4:b7:b7:2c:ac:f1:c4:19:36:f7:
         86:fa:b2:34:36:3e:be:a9:a7:3b:b6:d9:8f:d7:13:cc:88:79:
         51:8d:51:d0:3b:46:a5:25:f1:aa:92:86:14:98:63:49:b7:ca:
         fb:4b:4b:e4:56:6d:db:43:2b:87:c8:e9:a8:4f:d8:de:36:39:
         e3:1c:86:3a:ae:b7:14:4b:64:9b:01:88:ea:9d:3b:9c:44:2f:
         b1:ec:a4:5f:ee:49:ab:94:8d:2c:6a:4d:e2:4a:14:45:70:ae:
         3a:4d:c9:1f:14:fd:bc:f3:e0:06:e5:16:69:cc:d7:6a:6e:8e:
         40:aa:05:56:96:77:bb:81:65:96:79:72:e0:8f:7c:f9:e4:f3:
         b3:b2:7d:f3:38:18:b5:d1:58:ad:b9:19:9d:34:20:f2:99:22:
         5a:e6:86:fb:ed:37:ca:56:5a:8b:7c:59:c2:00:6f:5c:76:12:
         ad:f3:c8:a1:a0:53:74:76:3f:3e:74:f7:42:2a:57:85:20:92:
         57:0a:ae:63:49:11:29:39:97:35:f9:ac:57:f0:e7:35:0c:61:
         d8:93:30:f1:a0:ee:7c:cb:d6:22:c8:04:74:b5:38:89:98:13:
         52:67:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:45:37 2025 by rpki-client