Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f6f7d749-e4a7-390b-944e-33b3bfe75de0.roa
File:                     f6f7d749-e4a7-390b-944e-33b3bfe75de0.roa (raw, json)
Hash identifier:          +xY41omtqbh/xsYO9IErdewft1f7b2Hbwa7AlD4a7jw=
Subject key identifier:   22:37:61:F9:4D:DD:51:D5:37:8F:EE:AF:55:BC:33:55:C7:D5:89:D2
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B75F3D936B256F1ED98E17900
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f6f7d749-e4a7-390b-944e-33b3bfe75de0.roa
Signing time:             Thu 09 Oct 2025 04:28:36 +0000
ROA not before:           Thu 09 Oct 2025 04:28:36 +0000
ROA not after:            Wed 07 Jan 2026 05:28:36 +0000
asID:                     22079
IP address blocks:        2606:1380::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:f3:d9:36:b2:56:f1:ed:98:e1:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 04:28:36 2025 GMT
            Not After : Jan  7 05:28:36 2026 GMT
        Subject: CN=c45a830e-a464-40cb-b5bd-654a30d69957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:3d:bc:83:d1:c9:ca:40:91:96:b8:7e:b9:
                    8c:a9:d5:f4:b6:4b:7e:6d:ca:25:4b:5d:42:21:56:
                    a8:d3:cc:be:4b:93:3e:06:3f:db:f8:bf:bc:de:99:
                    a6:c5:e6:0a:b9:5d:80:ec:88:e6:99:86:77:3b:d7:
                    3b:ab:d1:1b:68:b8:3b:71:29:fc:6e:61:ea:40:ba:
                    fc:04:5e:13:e1:d6:4b:41:14:70:60:9d:54:61:e2:
                    1a:bc:cf:13:1c:2e:20:6c:c2:6d:af:52:f4:c7:ae:
                    34:69:bf:0b:0e:3c:77:74:77:63:db:ee:8b:91:90:
                    ef:f7:36:67:28:51:a6:14:75:60:4f:d4:6a:ad:cf:
                    4a:65:ce:f3:3d:7b:01:00:ae:b0:f4:52:e3:05:a5:
                    cd:b0:d6:d1:8a:92:b3:22:c9:12:60:1c:5b:af:79:
                    5a:ef:22:6d:91:6b:56:53:8c:ca:9d:62:9a:a4:59:
                    30:ec:30:d4:a7:d2:3a:f7:7a:2e:1f:5c:89:37:7c:
                    df:79:94:0e:6e:fc:09:e5:01:50:8a:32:0a:f0:08:
                    26:37:05:71:60:5d:a2:c7:d2:6e:6b:d9:c8:f7:a9:
                    de:17:18:63:84:e7:af:2b:e5:63:35:b4:77:a1:13:
                    09:ae:18:42:a6:75:da:e5:36:82:80:56:af:10:e6:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:61:F9:4D:DD:51:D5:37:8F:EE:AF:55:BC:33:55:C7:D5:89:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/f6f7d749-e4a7-390b-944e-33b3bfe75de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9c:ee:44:76:47:b0:a6:c2:be:f0:1d:0e:86:8a:5d:eb:83:
         5f:3e:7e:52:66:de:a2:bd:cf:c0:ce:a6:d8:6e:d1:c7:db:e2:
         80:75:69:85:c3:ae:fd:40:73:a5:d9:4d:83:f8:31:14:f6:34:
         c9:f7:f6:fb:7f:da:d5:dd:24:49:c5:69:39:b8:db:65:05:1e:
         86:09:a0:dc:fe:8a:ff:28:73:0c:12:d8:7b:14:27:6f:c9:34:
         a9:bc:da:5d:10:05:18:1f:d7:7e:dc:8a:2e:71:29:bc:b9:6e:
         b3:5d:a3:7a:e7:bb:22:fb:ab:c1:03:47:48:a9:24:1e:90:58:
         7a:f6:ca:a0:2d:3c:d0:ae:c3:1d:09:d4:d0:c4:35:0a:fa:93:
         bb:64:10:8e:39:3d:37:98:1d:41:16:70:4d:ea:90:4c:a2:9f:
         24:f1:d1:5b:e8:b7:2d:86:7e:03:b3:64:11:06:d6:a3:e9:34:
         86:68:70:09:ad:91:a6:e3:2e:d7:30:32:ff:65:c1:16:0a:d5:
         c7:69:a2:09:2e:9c:75:83:51:45:0c:f3:8b:5f:a6:a7:29:bd:
         72:76:b5:57:9d:9d:a3:b1:6c:c1:f8:73:1b:3d:af:40:5b:9e:
         41:42:3b:23:46:72:9b:94:d3:20:26:e8:71:d0:4e:2f:cd:c1:
         08:a7:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:37:42 2025 by rpki-client