Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa
File:                     6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa (raw, json)
Hash identifier:          RDvuWL6iCpO7JxXkVYhNGEqrWSw7l3PNFO/yqE291jw=
Subject key identifier:   8B:C9:0C:B5:86:C7:DC:2F:37:71:BE:05:86:EE:3D:5C:E7:FA:25:08
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584AFCCD67C7ED881AB72621F580
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa
Signing time:             Tue 26 Aug 2025 18:58:20 +0000
ROA not before:           Tue 26 Aug 2025 18:58:20 +0000
ROA not after:            Mon 24 Nov 2025 19:58:20 +0000
asID:                     7018
IP address blocks:        2607:52c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:cd:67:c7:ed:88:1a:b7:26:21:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Aug 26 18:58:20 2025 GMT
            Not After : Nov 24 19:58:20 2025 GMT
        Subject: CN=916b79ab-8d7d-4027-9ee6-8883835b158c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e9:ef:90:a7:10:c8:19:38:ce:09:93:47:3d:
                    44:2a:2f:75:5a:c8:b1:d6:1a:7f:e0:21:a9:44:73:
                    f9:f2:0d:a9:1b:97:f7:17:f8:18:1c:bd:a8:da:69:
                    88:d3:65:96:0f:a4:86:65:bc:23:bd:ef:9c:be:28:
                    33:99:5d:69:c3:bb:42:f0:42:0b:b3:50:87:16:86:
                    59:50:2c:00:26:a3:04:87:4d:30:34:28:6f:b9:17:
                    86:97:79:07:fe:e0:d8:3f:15:99:34:e3:27:d2:27:
                    54:23:b2:f1:ac:b7:24:6e:15:16:bf:c2:db:c9:39:
                    ce:b8:ef:a9:83:e6:00:d7:eb:62:c0:cf:65:5e:48:
                    62:ff:aa:ae:1b:91:b8:f8:94:6c:d3:68:9b:39:c7:
                    d8:1b:5f:45:f6:47:77:bf:0e:c6:08:03:dc:29:53:
                    c1:4d:d3:8c:e3:3e:4f:17:ef:81:90:25:c2:f4:ed:
                    5b:3a:89:ef:e8:2f:7b:4c:9e:d0:a8:48:f3:45:d7:
                    e6:87:d8:ec:5f:8a:7a:8f:fd:19:f9:45:35:17:a1:
                    7e:ca:8d:ba:37:c5:d0:51:02:8f:73:d4:59:cc:81:
                    5f:9a:c9:a2:f3:bc:67:b9:cd:71:90:74:3f:ab:ad:
                    c4:a6:32:6e:ec:48:3c:4a:7a:02:0d:8e:e1:73:dd:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:0C:B5:86:C7:DC:2F:37:71:BE:05:86:EE:3D:5C:E7:FA:25:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/6482c787-c3d1-38a1-b442-2d06e7a96eb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:52c0::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bf:7a:c3:bf:46:48:7a:7b:eb:7c:27:94:aa:eb:dc:ad:a1:
         08:55:59:84:41:77:f5:09:98:61:76:7d:16:2f:16:57:e6:a0:
         74:70:44:06:37:fa:56:4d:84:b0:e0:0f:46:33:39:88:2b:c3:
         fb:49:be:3b:83:4c:fa:bc:a7:ef:bc:59:49:21:4f:3b:a0:d0:
         98:48:45:a7:25:d8:86:f0:57:d8:9b:37:02:44:9f:c4:18:12:
         a5:b6:a7:f3:79:69:9b:b6:91:1c:38:27:0d:9a:cc:2e:58:02:
         90:be:67:46:1c:3e:e0:c3:eb:47:e4:32:77:b0:1c:46:2f:92:
         3e:e5:d2:6f:d4:25:59:b6:57:4d:a5:b6:01:10:f3:cd:52:0a:
         a6:48:a8:88:2e:a0:72:8b:64:5f:31:26:10:07:fc:c3:da:d8:
         88:7d:0a:49:bb:19:94:89:27:e9:38:11:8d:cb:87:6d:f0:0d:
         80:98:01:9c:8d:0a:fd:54:ac:a6:62:59:57:d0:3d:77:b0:e8:
         b5:71:b0:f7:06:52:9c:1d:02:3a:f4:7c:80:7a:f4:a2:22:4c:
         3e:43:62:f9:67:34:9d:b9:37:79:e5:b6:92:bb:7d:f1:40:ab:
         b1:f1:45:b9:9c:cc:be:21:a1:c4:90:fa:db:c1:ae:37:54:e7:
         dd:82:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:58:10 2025 by rpki-client