Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
File:                     5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa (raw, json)
Hash identifier:          Og8tweppJQ4asNgF1TyKIuolmlGiTn/dc3HjVODyE1U=
Subject key identifier:   9E:3E:0E:02:2A:CF:03:A7:17:5A:D6:7C:0C:E2:CC:DA:63:27:A3:A6
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584AC87652FE77965608667E7560
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     20253
IP address blocks:        2606:bc40:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:52:fe:77:96:56:08:66:7e:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=8f510d06-f463-4cf7-ba85-95323b620452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:90:3d:ae:bb:79:a4:fd:18:e7:92:ec:ab:
                    c9:5d:e1:2d:cd:10:0a:5d:ab:2f:f0:70:fc:76:78:
                    9c:22:e0:8f:cf:cb:9a:15:f1:0a:89:78:bf:7f:50:
                    da:b2:fc:43:39:cb:43:73:1f:81:03:6f:f6:06:d7:
                    6d:67:26:b7:5f:47:1e:cd:86:2d:c2:04:c5:be:b2:
                    f3:0c:5f:49:af:41:f6:e9:79:43:7d:b0:de:e8:f0:
                    52:d1:4a:81:f4:60:0a:2a:ce:6a:38:23:45:38:32:
                    62:3c:30:98:58:fb:0f:32:68:d2:03:2e:f2:17:80:
                    7d:81:eb:b9:e1:07:27:e7:4a:70:58:38:d4:b2:46:
                    a9:57:e7:0b:70:41:fc:42:d0:b1:e7:92:63:c3:ee:
                    e1:86:ca:80:e7:71:97:82:e5:a0:36:0a:3d:fd:37:
                    3f:dd:6e:5a:22:76:c2:3d:ef:29:48:ba:a4:e5:d7:
                    22:bc:ab:3f:4a:62:44:64:34:31:49:74:75:22:cb:
                    3f:b9:6f:d5:66:e6:65:6f:18:17:ea:c6:30:51:af:
                    d8:d6:46:4c:cb:f4:1a:57:9a:70:88:1e:9e:cc:57:
                    8b:08:ee:43:34:07:1b:1b:bd:eb:20:c9:bc:48:3c:
                    dc:f3:8c:cb:32:81:66:36:5b:d1:00:6c:ae:0e:16:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:0E:02:2A:CF:03:A7:17:5A:D6:7C:0C:E2:CC:DA:63:27:A3:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/5ed75551-e8c8-3819-a4bd-817e73ac9d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:14:7b:36:35:5a:8e:3f:40:2c:98:71:e8:fe:5b:c1:19:
         ad:0c:a9:91:76:f8:72:fa:86:c5:04:de:45:7a:f2:4a:23:de:
         01:bc:f6:f7:83:88:b9:56:b8:7f:64:d2:da:06:bf:07:17:3b:
         42:31:f7:41:a3:3c:cd:74:71:73:c0:58:e8:45:d5:f3:c6:55:
         b4:30:90:b0:da:d7:a4:36:56:be:62:d1:5f:9d:9d:b5:2b:9f:
         13:2b:ce:71:f4:3d:01:5e:7e:3a:73:0e:6e:e9:3c:40:c0:9d:
         78:80:85:27:a9:a4:97:de:39:e7:6d:54:fb:bf:c9:73:a4:9c:
         db:9b:47:5f:6d:ce:3a:34:20:be:52:bb:1d:a9:c7:79:a2:bf:
         e3:d8:d9:c7:df:1a:36:71:03:46:e8:02:6d:23:d0:23:10:26:
         9a:9d:ac:e2:88:8d:92:1d:bb:6e:b7:99:e2:9d:3c:d3:25:8b:
         87:d1:01:9f:03:9d:39:80:86:4a:86:ab:48:ad:12:d9:95:51:
         af:89:5c:e4:70:1f:f1:8a:52:9b:82:f8:74:e0:92:5d:e3:18:
         5a:80:cf:bc:f5:c7:7a:4d:7f:88:a9:c7:b5:30:2d:9c:3a:05:
         17:14:2b:a6:56:70:ea:d5:12:55:c4:bf:c9:ca:86:4f:e2:9d:
         5b:5d:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:48 2025 by rpki-client