Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
File:                     3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json)
Hash identifier:          ZN9uO1KtiqVIB8h/l7aKVhWr2Lif0v9FHNnQk7IOSwE=
Subject key identifier:   90:68:23:AE:78:B1:08:8D:F1:44:A5:1D:FE:48:D5:7F:FA:1D:56:74
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584B48E1B868402ABFE6AA151E80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397182
IP address blocks:        2606:c7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b8:68:40:2a:bf:e6:aa:15:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c29ccae7-d7db-4c8b-9b49-6967d21263cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:81:57:b3:c1:31:e4:60:85:f6:ed:a8:d0:
                    7c:8e:61:bf:75:bb:b5:ee:ca:39:58:72:ac:d2:1d:
                    16:bf:08:83:1e:4b:ba:50:5a:a2:97:25:56:4a:38:
                    55:79:cf:37:53:b7:c2:ed:a7:78:ef:2c:f2:b8:67:
                    57:cf:0b:d3:44:fb:e8:62:82:08:de:d8:9e:7c:d3:
                    14:fc:fc:a5:77:2f:04:9b:af:31:0b:6d:bf:ff:f6:
                    94:79:20:59:f8:4c:4c:36:04:a8:9c:9b:5e:42:9a:
                    a6:84:47:27:0c:9a:9b:8b:0a:cb:fc:aa:97:f4:0b:
                    f5:35:39:54:94:7a:31:28:e5:84:d3:2b:c9:32:94:
                    a2:d5:a1:08:fb:54:80:9c:96:26:43:84:0f:1c:3c:
                    b8:ba:3a:c9:fa:4d:46:ff:4c:c2:0b:56:dc:b9:dd:
                    19:e9:c4:e0:95:3f:47:63:ce:7b:83:2e:0e:d5:8d:
                    66:b7:d3:17:eb:a4:9d:80:3b:57:e7:f5:fa:91:35:
                    ee:e0:e6:53:78:8c:65:8d:af:45:d6:0b:48:0a:3a:
                    22:87:ce:33:d5:52:31:08:6e:9e:43:36:b7:a2:ea:
                    b5:88:e6:46:30:78:b3:76:7e:71:dd:f1:66:2f:17:
                    fa:a8:f0:7b:1f:11:67:e5:4a:bc:f5:89:d9:89:78:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:68:23:AE:78:B1:08:8D:F1:44:A5:1D:FE:48:D5:7F:FA:1D:56:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:72:d3:a6:56:32:76:b4:dc:92:fe:1a:1b:81:ba:9f:fb:
         da:5e:7b:54:17:5f:66:fa:3d:ce:b8:e5:6b:20:bd:54:77:a9:
         2c:c8:27:e2:19:02:65:73:c6:b8:1b:97:37:a3:4d:b4:f6:a4:
         11:9e:92:56:66:5b:8c:e7:bd:25:2c:18:6b:5c:f6:90:95:31:
         95:4b:da:87:04:19:0d:d2:ad:32:a7:27:8c:18:79:f3:df:c4:
         5c:89:2e:29:2f:8e:e1:bb:0a:1e:11:7a:0a:6f:b1:66:62:a2:
         b5:e9:74:81:65:83:d9:07:fe:eb:00:6b:e8:63:13:1d:e3:10:
         e7:6f:4d:fd:68:22:bf:6e:d5:a5:65:4d:9f:92:96:f1:d0:93:
         41:0e:d7:08:ef:84:5e:5d:a5:26:e6:ca:80:3e:bd:bb:5f:d3:
         02:2e:a0:7e:36:89:f5:a5:2f:e6:48:f1:c0:73:76:e5:00:06:
         44:42:53:d9:0b:da:fb:2a:d1:87:11:f0:7d:e6:00:7f:f1:67:
         ae:27:ca:0b:3c:e3:25:6c:60:87:ae:3f:5d:54:64:a3:50:65:
         f8:8d:3f:e0:2b:cf:94:05:8b:b6:58:df:a7:8f:8f:0f:f5:4b:
         24:e3:bf:14:8c:b5:32:3b:bc:80:8e:75:16:27:74:be:99:68:
         41:3b:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:38 2025 by rpki-client