Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa
File:                     a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa (raw, json)
Hash identifier:          DhXeBqywkiWRNJlQ2pQ0EHq/hleKq6jAu8P5AQuNDpg=
Subject key identifier:   8B:DB:B2:FD:65:1C:4E:D4:8B:E4:71:B0:A2:FF:4F:94:4E:A1:0D:5B
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584B328C4528FFA0C67A16F7F500
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     396865
IP address blocks:        2605:72c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:45:28:ff:a0:c6:7a:16:f7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=f85f022b-1955-4be0-8fed-ff4fd905ca09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:66:8b:6d:99:73:ce:e1:71:3e:ee:eb:c0:
                    a6:f6:f6:ee:a9:4f:b0:64:77:af:a3:3e:4d:35:b1:
                    f8:40:1a:e9:1f:f1:6b:68:33:2a:a5:33:f8:de:a9:
                    ae:86:d0:41:77:2f:2c:34:40:64:a6:1d:42:db:be:
                    7d:98:ea:73:ba:02:95:10:de:80:dd:c1:05:dd:14:
                    0d:30:cd:8b:41:2e:01:07:cf:9a:6c:d7:5a:c6:40:
                    1f:6b:c9:cf:b7:45:ff:8d:58:f8:fd:ca:e6:f1:8d:
                    5c:67:04:cc:3c:be:71:6b:6e:55:cc:b3:9e:d9:0b:
                    6a:9f:e6:91:cb:8b:49:e8:b9:94:7a:e4:14:31:86:
                    a1:20:57:7d:3d:a3:d8:82:80:70:25:48:a2:97:62:
                    61:87:9d:07:5b:71:db:e0:c3:f9:fb:71:08:d6:80:
                    9c:13:70:10:5c:c7:6b:07:08:e8:ad:5b:44:31:c6:
                    33:ad:89:f7:2b:30:ea:49:2c:62:81:ce:49:cd:e2:
                    2a:57:11:34:12:53:4c:35:53:f4:cb:25:d9:21:1f:
                    7e:17:61:27:a9:88:12:9e:83:16:c1:41:bb:a7:31:
                    7a:99:f7:7b:18:b8:01:de:f7:8b:93:70:4d:ac:ba:
                    97:bf:da:96:54:73:82:e3:9b:da:2c:35:19:e3:a0:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:B2:FD:65:1C:4E:D4:8B:E4:71:B0:A2:FF:4F:94:4E:A1:0D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/a9ec3b72-feed-3b10-aa12-3f4f03fa19ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:72c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:7c:0a:6d:d0:0f:a8:d5:c4:8d:cf:cc:52:54:d8:b3:54:6b:
         01:c6:a6:f3:0f:72:8b:10:35:d4:f4:f4:38:ae:e4:87:f7:f7:
         c3:f0:ed:6d:fd:91:a5:bf:0f:46:88:89:00:90:31:3a:9f:a7:
         fc:16:96:ca:87:a4:04:ea:ae:ff:3a:ae:37:b4:76:ec:dd:e0:
         42:66:25:20:61:39:38:fe:eb:9a:49:bb:de:71:23:f6:9b:ed:
         3c:e3:9f:b2:37:29:67:36:46:e3:6d:56:7e:bd:24:ad:6b:51:
         e3:66:0f:39:7c:65:1d:11:fa:8c:b3:41:b2:66:ec:bf:b8:c2:
         f1:61:03:40:0e:a0:c2:85:77:d0:9e:f1:9c:18:ba:3d:d3:4e:
         6f:55:1b:f3:4c:1a:f3:0d:d1:99:df:cd:ff:18:95:7a:2d:46:
         61:6b:bf:56:5c:14:8c:24:fe:e2:e9:ed:c4:4c:44:d0:b9:8c:
         ce:df:b9:69:e7:82:ff:35:ba:fc:74:44:d0:a8:45:02:d3:aa:
         74:71:e3:b1:01:0d:1f:fd:ab:b0:78:4d:e9:20:4a:49:91:f1:
         09:24:3d:b4:fb:7a:5a:6a:8f:07:e1:6e:58:86:61:ef:dc:2d:
         f9:4b:35:4c:c2:c3:c8:80:45:10:0b:40:14:01:af:0b:8c:36:
         17:ef:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:19:53 2025 by rpki-client