Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
File:                     0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa (raw, json)
Hash identifier:          SuMnMOEgzvOvwPOX6RXC69e/J4zejy3t3IAqzIaOSyI=
Subject key identifier:   BB:69:A9:6D:85:B7:74:4F:2B:15:C5:C7:75:DF:1D:05:06:4A:D1:47
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B1F01776B814593258EF251E0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     151397
IP address blocks:        128.1.12.0/24 maxlen: 24
                          128.1.13.0/24 maxlen: 24
                          128.1.15.0/24 maxlen: 24
                          2602:ffe4:c5f::/48 maxlen: 48
                          2602:ffe4:c60::/48 maxlen: 48
                          2602:ffe4:c61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:77:6b:81:45:93:25:8e:f2:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=b4451b3b-53c8-498c-90f1-669b6ec874ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:a4:13:d5:9d:fe:7b:b1:93:88:5b:e5:01:
                    fe:73:fc:c3:b3:01:a2:31:32:0d:1d:2d:90:47:c9:
                    b2:71:cd:63:5f:9a:fa:33:92:e1:d3:66:5c:92:e0:
                    26:d3:33:8d:3a:2d:57:29:c9:b5:a3:28:62:ef:e6:
                    79:fc:43:6e:66:71:68:dc:61:4c:21:a8:ce:5f:f8:
                    e3:78:b7:89:db:95:63:fd:2d:1d:13:45:26:30:ac:
                    c0:ad:a3:b5:04:df:ad:f7:73:53:a7:81:7a:a3:ef:
                    6c:a6:5d:d6:8c:c6:cd:67:45:66:a7:a4:58:33:4e:
                    9b:4e:0d:bf:b9:62:ce:c1:5b:6a:0c:00:17:ee:b7:
                    50:16:21:a8:2d:0b:b9:1b:96:4a:2e:1b:bb:0e:78:
                    95:d3:b8:04:2e:28:de:b6:5d:7f:a5:e4:c0:d0:a0:
                    06:50:61:30:34:f3:2c:4b:21:06:3c:9c:a9:10:84:
                    de:be:a8:af:9e:7e:1d:fd:c5:e4:45:52:6c:3e:92:
                    62:92:38:94:9f:89:7e:f2:43:87:38:43:f5:57:17:
                    e1:ab:f7:78:17:95:c9:11:79:02:d4:cc:37:3a:59:
                    2d:61:54:c5:ef:7b:24:b0:2b:59:0d:6c:a4:1c:1c:
                    76:7e:07:d5:60:b0:f1:d9:10:14:76:7c:cb:ba:76:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:A9:6D:85:B7:74:4F:2B:15:C5:C7:75:DF:1D:05:06:4A:D1:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fb3cb62-dc3c-3728-99c7-67d0d8402d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.12.0/23
                  128.1.15.0/24
                IPv6:
                  2602:ffe4:c5f::-2602:ffe4:c61:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:32:fa:7e:ee:08:47:de:09:1a:e9:b4:7d:14:fb:b4:58:
         d2:1f:e0:a7:37:fe:37:bf:5a:64:32:be:f3:17:4d:bb:09:41:
         b2:48:b6:57:e2:51:ac:2f:1a:d9:fd:bf:ae:f4:58:0d:4f:21:
         a3:e6:d4:9f:6d:31:48:0d:dd:ae:22:16:31:8a:82:b6:f0:1e:
         4f:34:a2:6b:5d:78:3f:5e:9a:ac:47:03:27:7e:8d:c4:3e:8a:
         4e:43:98:60:dd:f3:50:b6:14:a2:9c:76:91:24:34:f9:16:6e:
         8a:ef:04:51:c7:b3:85:75:14:6e:a8:f9:ea:29:47:6a:34:44:
         bf:e8:d2:aa:44:17:6b:6b:8c:af:1a:d1:c5:93:e3:29:f6:c8:
         03:90:26:43:1a:ec:3e:d1:00:e2:53:2b:20:d4:30:a8:7a:73:
         d4:03:ee:61:2e:c6:fb:82:9f:30:f3:f3:9a:8a:88:14:03:22:
         1f:19:a0:d5:22:85:fd:75:51:13:70:dc:22:2d:d1:b5:46:47:
         67:a2:f3:ce:a6:e1:59:35:79:59:6a:0e:45:9c:35:b2:3c:66:
         09:b2:b9:b1:56:7f:af:38:a9:ed:39:30:e3:ff:fd:62:99:b4:
         26:89:7d:a0:62:8a:e2:c5:a9:84:5d:95:6d:2a:44:ff:85:0b:
         b3:03:36:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:45 2025 by rpki-client