Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
File:                     6246498c-93f9-3ea9-a731-d9d089253344.roa (raw, json)
Hash identifier:          fH9w0LQ3piCISqsSoJIl6bixZSdApyrmfnkfGAzMpz8=
Subject key identifier:   FB:39:DA:C5:55:25:EA:D1:A5:82:7B:57:E4:CF:1C:B6:58:FE:35:1B
Certificate issuer:       /CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
Certificate serial:       010D0C9F4328584B36BC53C58E3BC128CB6E5340
Authority key identifier: F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2607:1780:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:53:c5:8e:3b:c1:28:cb:6e:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f2956f-ded7-4edb-b293-ea6f94fbf58b
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=f22e32a8-789c-47df-9ae5-3fc67a836770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:82:60:23:fc:22:72:77:b2:0a:17:56:17:
                    9b:61:e3:22:2b:d1:de:a0:09:e7:e4:b7:18:c8:84:
                    3d:8e:4c:b0:47:e6:7d:78:3c:88:0c:27:9b:41:65:
                    53:c5:7d:61:44:21:f4:e8:2f:da:f5:18:8c:eb:76:
                    9c:1b:a5:66:00:aa:81:0f:c5:b6:4e:bd:58:4c:73:
                    e0:10:29:e5:a4:c0:52:52:71:b4:a0:bf:70:dc:62:
                    ba:86:6a:6a:b8:4a:5b:10:f9:35:e1:51:e7:ed:e6:
                    61:05:2b:c8:63:cc:30:e6:83:9b:8e:d2:2c:96:4a:
                    6f:f7:3e:23:71:de:af:4d:36:9a:c9:f4:01:6b:1c:
                    fb:4c:c1:55:c5:d7:08:c5:31:c5:24:35:69:fe:59:
                    8f:51:43:43:8e:0a:b8:99:79:b3:84:6a:68:e8:5d:
                    c8:55:4e:f8:77:f9:3e:0f:76:d3:00:e4:82:f1:11:
                    f5:09:8e:29:b8:87:c8:ac:57:4a:5c:50:24:74:61:
                    cf:62:28:ce:12:0a:03:09:04:e0:54:19:23:7a:f5:
                    7c:a6:20:42:fa:c2:d1:6f:44:4f:c0:9f:d9:ee:a9:
                    c6:45:f0:d8:28:0a:49:8b:32:77:fc:5e:73:05:b7:
                    1a:fb:6b:f3:89:b6:d1:7c:92:69:ad:4f:8b:ec:9c:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:DA:C5:55:25:EA:D1:A5:82:7B:57:E4:CF:1C:B6:58:FE:35:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/6246498c-93f9-3ea9-a731-d9d089253344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b/10f2956f-ded7-4edb-b293-ea6f94fbf58b.crl

            X509v3 Authority Key Identifier:
                keyid:F9:14:EF:F9:4B:E3:88:06:AB:0A:CD:4E:05:E4:3B:9D:C1:DD:46:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/10f2956f-ded7-4edb-b293-ea6f94fbf58b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1780:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:df:b6:2c:97:40:64:69:b5:62:de:1f:cc:75:b2:aa:08:d4:
         84:5a:fb:0c:fa:dc:75:63:09:bd:31:93:67:af:e1:81:d6:38:
         9d:f8:81:16:25:8c:40:9c:4c:d2:3c:7d:6d:bc:12:dd:ca:f3:
         30:ee:cd:64:4b:b1:6f:c6:1d:39:63:8c:4f:67:15:ad:81:21:
         63:c0:32:74:a0:60:92:b8:7c:78:1f:50:33:82:ca:36:98:bd:
         70:d3:e8:91:b1:05:c1:61:8a:ee:05:a4:7e:07:25:c0:e3:01:
         88:3b:0c:23:b1:fa:d4:45:c3:9b:9b:69:29:c0:af:7e:bc:93:
         53:31:70:77:f7:7c:70:41:d4:8e:1d:22:76:b2:31:bb:60:5e:
         53:7d:e9:65:2b:aa:1b:09:ff:77:13:fb:ab:16:95:39:07:ff:
         f8:a1:1a:8c:28:6e:a7:09:49:4d:99:44:93:7c:d2:58:5b:69:
         f8:a1:27:b5:81:1b:bf:11:a7:65:50:e6:d8:19:b7:b3:7b:b5:
         8c:00:b4:83:2b:40:b7:98:91:f5:5a:c3:94:e5:38:d4:06:3b:
         b6:86:d6:b4:20:b8:ba:6b:b3:31:07:74:6c:a9:05:bd:a8:a5:
         a5:80:c3:06:eb:72:60:e0:84:e4:da:a4:8f:f9:45:a9:3f:c9:
         a9:ae:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:23 2025 by rpki-client