Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
File:                     b9fed38b-7833-339a-a34b-0e0e40f943aa.roa (raw, json)
Hash identifier:          eU5aFWzCSTXByvQR/E0iVx9+nY/bszTfWx6KJgKQQiA=
Subject key identifier:   A1:26:96:A4:A1:E7:C0:50:7A:6A:A0:47:FB:2C:47:38:39:F5:2E:77
Certificate issuer:       /CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
Certificate serial:       010D0C9F4328584B2496C8AEDC2F7C1A1CD22700
Authority key identifier: 16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     32726
IP address blocks:        2620:12f:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c8:ae:dc:2f:7c:1a:1c:d2:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7245cdbf-97d7-4376-9d8d-298cda5d3854
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=d8227768-d554-44c6-8c6e-7a8a9eadef08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:71:c5:4f:d1:60:12:f1:9e:62:09:a6:e8:13:
                    ed:18:e7:60:50:3b:50:2f:b8:d4:b4:2c:ed:8b:db:
                    70:81:97:23:46:db:16:08:21:da:5f:5d:f7:35:50:
                    ee:f7:2d:65:4d:30:2c:3f:55:d4:a4:a7:e7:fb:df:
                    89:48:9a:2e:ba:ce:4a:12:36:30:2d:f4:e1:31:3e:
                    5a:be:7d:a0:c4:8c:08:9f:f0:f4:20:ee:27:f0:78:
                    6f:35:ff:47:fc:2d:61:d6:47:e1:e0:48:7c:74:87:
                    7c:7c:18:8d:26:29:43:83:cc:03:10:4c:aa:2e:79:
                    38:2b:d1:76:92:ad:65:84:b8:85:26:d7:c9:1c:10:
                    9d:a4:d6:42:33:b1:8d:1e:02:a9:92:39:94:7e:1b:
                    41:69:c6:3b:db:79:ba:bc:3c:3b:c0:1f:1c:a4:43:
                    a2:25:ea:53:bb:40:66:77:c0:da:85:84:35:cf:4c:
                    73:10:95:8b:89:ac:3a:05:ed:ed:86:f3:32:54:84:
                    71:95:d1:a8:52:75:ef:f1:3c:72:67:99:0f:52:dc:
                    69:a3:7d:13:4f:5e:30:97:62:f6:dc:8a:6e:ea:ec:
                    8c:64:1c:88:ec:04:dc:1c:53:17:9e:7d:90:66:84:
                    ac:1f:4a:a4:1e:92:b2:c3:6c:45:c0:00:9a:d3:b1:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:26:96:A4:A1:E7:C0:50:7A:6A:A0:47:FB:2C:47:38:39:F5:2E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/b9fed38b-7833-339a-a34b-0e0e40f943aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854/7245cdbf-97d7-4376-9d8d-298cda5d3854.crl

            X509v3 Authority Key Identifier:
                keyid:16:E1:82:B0:4E:45:0C:2A:9E:DD:0D:F0:AA:AC:06:28:3E:D9:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7245cdbf-97d7-4376-9d8d-298cda5d3854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12f:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:07:e5:a7:52:d1:47:15:87:de:0e:93:7b:cc:e4:50:c3:
         d4:93:75:d6:7c:6b:5d:44:e9:c2:10:27:3b:b9:78:4c:24:0f:
         1b:86:d7:58:d2:de:b0:a6:b1:fe:15:50:f6:31:4e:d1:0e:f5:
         cf:b6:8b:27:7f:a3:b7:18:2a:54:47:f8:16:5e:4b:fd:c0:4f:
         f1:ff:f5:0f:e8:42:21:95:51:99:7d:3d:07:c0:96:09:7c:1c:
         f5:2c:67:ad:c6:12:76:f0:77:a9:da:68:4e:6b:4f:6a:eb:11:
         b0:c1:63:3f:0b:22:48:60:4b:43:8a:ed:99:ae:02:7a:e7:dc:
         8a:bd:6a:56:85:9b:c0:a8:ba:23:09:d3:bc:b7:ef:b1:46:65:
         74:8c:d0:33:d8:8b:b0:30:00:fb:d0:a4:8b:e9:81:29:be:3a:
         3e:ec:ab:ba:8a:1b:80:f2:6e:56:3e:df:6a:e8:a8:e0:06:63:
         c7:46:25:07:fb:6e:49:43:ff:5b:ff:fb:83:f5:d6:99:a2:f0:
         b4:d5:09:72:2a:3f:02:f2:54:60:14:65:88:db:22:d4:59:f1:
         e2:44:8c:5d:e2:16:04:b6:d5:49:5c:ee:0d:93:a1:0a:7c:43:
         58:dc:1d:0e:1b:9d:c4:2b:0c:b8:6c:4a:59:22:11:52:3d:6f:
         8b:2d:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:46:49 2025 by rpki-client