Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ea8702d8-9b15-35de-a2e0-15e2381019b6.roa
File:                     ea8702d8-9b15-35de-a2e0-15e2381019b6.roa (raw, json)
Hash identifier:          W2tCR0J+VNFaeqR5MeBFzz0MXHi1UyaDNup+IcUlQlk=
Subject key identifier:   13:8D:5F:F3:52:B9:79:38:86:52:21:CB:27:A6:E7:24:47:56:08:E4
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584B8EACEF2E4A51786704710A40
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ea8702d8-9b15-35de-a2e0-15e2381019b6.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     20253
IP address blocks:        2606:bc40:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ef:2e:4a:51:78:67:04:71:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=cca2fe54-25c8-45da-a206-8711a1d7320e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:c9:ac:00:fe:e7:f5:c9:71:20:b6:3d:85:
                    40:de:6e:1b:12:1d:a2:f5:c4:2f:6e:61:73:90:27:
                    f0:da:5e:37:83:33:b3:e7:d6:71:f7:1b:71:63:a3:
                    77:06:45:11:8f:f0:32:24:0f:ac:40:50:f8:1f:6d:
                    a6:79:4b:f2:ec:47:58:6f:ca:22:e5:fc:cf:44:63:
                    ca:4a:f3:f7:e6:e0:6b:41:1d:d3:d9:9c:a3:b7:00:
                    35:5c:3f:19:c1:08:32:b3:80:4c:53:ad:87:52:9b:
                    40:70:4e:ac:e9:8a:7a:4a:f8:04:ae:6d:40:71:fb:
                    db:8c:9f:e8:42:7d:70:17:b4:31:f4:5a:3d:9d:2c:
                    59:41:82:4d:45:a1:cf:97:68:80:ce:12:84:be:2a:
                    20:bc:e2:41:2c:a8:94:1b:22:46:19:ac:d6:e1:07:
                    5d:52:4c:0a:f5:4b:b8:4a:84:05:69:94:20:35:bb:
                    68:7b:7a:27:05:df:26:82:7c:33:5d:e8:0c:72:dc:
                    8e:a2:60:38:af:2c:98:4b:96:3b:ea:3e:17:78:f9:
                    2f:16:fc:fb:f2:80:e0:8d:c8:bd:30:96:06:1e:69:
                    97:58:2f:b5:7b:fb:46:a4:df:ce:b8:63:09:3c:9c:
                    0c:dd:37:82:11:d2:b2:98:14:86:d4:0e:e8:79:39:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8D:5F:F3:52:B9:79:38:86:52:21:CB:27:A6:E7:24:47:56:08:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/ea8702d8-9b15-35de-a2e0-15e2381019b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:e0:c8:7c:be:0b:31:3e:22:1e:cf:3f:90:53:47:be:e7:d3:
         d4:f4:6a:98:98:d6:45:c7:2e:6b:2f:c4:ff:85:7f:7d:00:e5:
         84:fe:7b:6b:93:e7:4b:26:43:b4:10:cc:86:0e:08:90:37:89:
         5d:ca:05:16:13:a8:7d:f0:6d:47:06:da:a2:8d:dc:21:52:c3:
         48:26:e0:da:c3:0c:9e:bc:57:55:df:fc:70:27:e2:d5:93:ea:
         54:fe:5f:82:c1:e5:8f:1f:de:10:3b:75:d5:07:b8:68:05:b6:
         26:4d:7a:ee:3e:35:8c:6b:42:73:d8:ee:3f:29:f0:4e:e0:20:
         7d:02:b8:76:4e:01:55:06:6d:8a:a5:8a:12:59:63:2e:e0:3d:
         8f:b6:af:38:e4:8d:0c:a7:5c:48:0f:3a:62:86:4d:d3:26:ac:
         27:33:68:4b:bf:0b:86:17:bb:51:a8:6b:9d:e6:e7:7f:ea:a3:
         e1:61:fb:37:35:60:4e:fc:2b:72:0e:f5:45:91:72:d1:89:a9:
         d3:d6:bc:71:92:9e:bd:a4:2b:86:bc:84:17:f0:72:1e:29:a8:
         93:49:c5:2a:c0:99:bf:b6:e5:40:ba:60:2e:49:4b:59:8d:9b:
         f2:8b:ad:db:44:e9:53:17:55:96:4b:61:52:5d:de:01:ce:bf:
         7e:51:5f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:04 2025 by rpki-client