Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa
File:                     bca3baf1-7449-3055-af52-925020b90825.roa (raw, json)
Hash identifier:          yY2O9qY10AxpoVmztEehf/8F/sRJuDb3f/apqn752zI=
Subject key identifier:   A6:47:90:FA:98:81:B1:C8:56:D8:EA:72:0E:81:78:EC:AB:44:7F:7A
Certificate issuer:       /CN=12feb772-5112-4009-90bd-0b1f4d0ef6af
Certificate serial:       010D0C9F4328584AF52138A88A748770016CCD00
Authority key identifier: 36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     10497
IP address blocks:        2620:1ff::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:38:a8:8a:74:87:70:01:6c:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12feb772-5112-4009-90bd-0b1f4d0ef6af
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=0be13399-4873-491d-980c-09ec0e6a584f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4f:06:23:dd:20:44:57:7b:35:c9:ba:45:75:
                    2c:19:2a:3b:60:15:de:79:4d:dc:5b:f3:bf:1c:56:
                    32:e2:c6:39:c2:22:e0:f9:61:b4:f4:c6:dc:86:9d:
                    2d:b4:5f:a6:2e:93:2b:e5:74:22:28:8a:12:f1:92:
                    fd:16:ce:13:e1:da:12:77:5b:c6:6d:4e:38:d4:2e:
                    8e:94:0b:7e:e5:d3:31:42:7b:b6:d9:2a:59:3e:2a:
                    3e:8f:72:24:c1:6a:39:b5:9e:d9:30:81:95:1b:80:
                    42:af:16:75:fd:f4:d5:a5:e9:23:9c:c9:07:8c:6d:
                    0d:a9:4f:da:91:c8:0b:eb:a1:9b:0b:be:af:90:f9:
                    72:b9:12:a7:30:d2:4a:72:75:bf:a8:3d:ff:2e:6f:
                    da:a9:3b:a6:b5:08:4c:9c:55:4e:c7:64:44:ab:36:
                    ff:6f:ff:5a:88:3d:14:b7:07:c6:6a:ac:7a:f3:0f:
                    44:c6:46:b8:10:4b:92:41:43:ab:f9:90:3f:1c:58:
                    17:44:e8:6c:3d:50:8a:a5:3e:25:47:2b:aa:73:6b:
                    11:5b:5f:d1:64:0d:46:13:01:60:08:f8:42:84:45:
                    a1:7f:08:73:f5:4b:90:fc:ca:d7:36:d6:f1:67:d9:
                    da:6c:85:b7:28:7f:e0:4d:0f:88:3e:02:cd:7f:90:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:47:90:FA:98:81:B1:C8:56:D8:EA:72:0E:81:78:EC:AB:44:7F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/bca3baf1-7449-3055-af52-925020b90825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af/12feb772-5112-4009-90bd-0b1f4d0ef6af.crl

            X509v3 Authority Key Identifier:
                keyid:36:54:09:1F:C8:17:3C:44:C9:CC:C7:72:B9:C8:16:CA:B4:DE:4E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/12feb772-5112-4009-90bd-0b1f4d0ef6af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ff::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:b4:c8:a9:e4:16:b9:b0:cc:39:c2:e9:d8:8b:b3:db:78:
         28:42:e8:1a:a1:d1:4a:37:e0:8b:53:ee:30:54:d2:f4:75:9e:
         55:29:20:dd:fa:ab:51:d5:f4:c9:e8:b5:10:68:40:f5:1a:28:
         93:30:f1:8a:94:81:74:49:ff:90:b0:c8:d4:f1:b3:b6:75:4d:
         a5:0a:f7:a1:fe:9c:fa:49:b6:16:bd:ab:0b:d8:0a:45:23:44:
         fe:04:8d:2a:25:ae:e6:bb:3a:62:e0:2f:e9:e6:82:aa:c5:30:
         d1:59:14:50:f3:0d:db:c8:2d:19:f0:cd:c7:84:04:f5:65:cd:
         03:b8:bf:95:53:e8:68:72:ec:43:5f:d8:78:cd:9b:fb:51:13:
         17:db:3f:f4:9a:fd:5b:ab:47:67:3e:9b:d9:f9:48:d8:0c:a4:
         2d:7a:c2:5f:c6:52:7e:7e:71:17:21:4a:78:fb:8a:45:45:14:
         c0:8c:77:1f:6b:e8:0c:f1:44:d4:d5:73:c5:5c:60:18:d8:a9:
         5d:96:d1:8c:ee:5c:d9:ac:24:73:6f:71:71:2a:cd:0d:ed:a6:
         4c:f6:57:bd:38:f2:6e:9c:77:6b:dd:a8:75:3d:93:e6:9e:79:
         7e:92:9f:b3:46:59:5f:99:e4:56:ee:60:97:92:6c:36:6c:22:
         0a:72:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 03:02:33 2025 by rpki-client