Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
File:                     912a4fa3-4f2a-367c-af73-91419fdd464c.roa (raw, json)
Hash identifier:          EoW2agcsryinSamRO//pSnfKUdwKzspIVAXvD4b0o5s=
Subject key identifier:   0C:AF:82:47:84:88:74:46:F2:0B:57:71:DD:7D:0C:64:71:2F:1D:31
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F4328584B891770740EFF5BD1DBF84E40
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     41690
IP address blocks:        2620:132:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:70:74:0e:ff:5b:d1:db:f8:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=2b35fffa-1608-4096-8abd-50414586fbf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:c7:fe:5a:38:ea:f3:f9:0e:a0:2b:e3:01:
                    ee:96:d8:bf:3f:f7:a5:fc:bb:bd:05:7d:81:c2:5b:
                    33:23:66:30:48:f6:f2:8c:5a:8c:c8:e4:5d:2e:7f:
                    7c:9f:67:ed:32:d9:c9:95:fe:27:bf:47:80:29:4f:
                    03:8f:22:28:6f:89:2a:4f:38:2d:4f:c1:aa:09:8d:
                    c9:40:e3:82:2a:9d:ac:eb:0f:28:fc:08:bd:37:8f:
                    25:c8:92:9d:a5:03:04:1a:dc:64:c6:6a:06:cc:46:
                    44:2f:55:b8:46:b9:70:f6:ec:63:25:65:2b:28:3b:
                    4f:b9:7f:ea:15:9e:18:99:ae:b5:68:81:e3:6d:5d:
                    f7:98:63:17:2c:a6:b4:ff:0b:0e:4b:a1:05:21:1d:
                    57:25:13:da:f6:d9:85:f2:02:66:52:08:05:b6:36:
                    6c:c7:58:8f:eb:12:37:f1:6f:ba:67:c0:0d:b7:74:
                    2b:fb:18:23:98:bc:9f:8f:4d:c6:23:19:59:d6:22:
                    dc:e2:08:19:7f:1d:6d:d7:31:1a:9e:d0:14:10:ef:
                    32:9a:73:4d:f0:97:1e:96:dc:14:3a:5f:ae:ef:36:
                    e5:b5:55:b0:cb:4a:b5:76:78:a8:d4:b9:24:19:a4:
                    65:f5:e0:98:7e:4d:ec:4f:fb:e5:23:f0:24:3c:12:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:82:47:84:88:74:46:F2:0B:57:71:DD:7D:0C:64:71:2F:1D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/912a4fa3-4f2a-367c-af73-91419fdd464c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:132:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:08:fb:39:93:12:9c:de:6e:ca:dd:f8:df:05:e5:b1:9c:4b:
         8b:c0:72:0a:7b:49:57:17:6d:3f:fd:91:35:7d:aa:85:b3:e5:
         b1:34:b4:e1:f2:ce:49:49:60:b4:f1:8c:25:a9:85:5a:33:33:
         ac:4e:22:f0:f7:f9:14:5d:96:ec:5e:41:fa:48:aa:bc:3b:e0:
         04:ea:02:b8:d2:14:10:6a:cb:c3:34:80:a6:67:e8:fd:d8:f7:
         04:36:5e:13:b2:43:04:d5:df:bd:5d:1c:ea:85:af:54:ab:58:
         f0:3f:d2:5f:7c:a5:5d:24:0a:3e:00:7a:1c:f2:6e:72:82:e6:
         6e:60:02:6f:35:d8:b5:e3:82:b4:ed:e7:3c:b0:28:c5:f4:a0:
         eb:00:50:fa:74:e1:d6:19:91:55:7f:c8:02:b9:93:37:5d:e7:
         6a:2a:29:13:e6:7d:dd:8c:2b:c2:62:1e:3f:0e:b8:4f:35:67:
         52:1d:99:81:3f:98:41:fd:c8:a2:35:dc:17:10:70:18:98:a5:
         24:65:91:85:93:6e:85:21:9b:41:4a:da:86:ff:de:98:59:6b:
         de:62:7d:7c:a0:0d:cd:d7:1b:df:16:1c:88:e8:24:f3:ce:a3:
         f1:9b:01:e5:99:9b:6a:95:6c:63:6a:fa:2c:91:4f:1f:de:4a:
         bf:fd:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:27 2025 by rpki-client