Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
File:                     b8d397c7-de40-30e1-bcae-8b78956f87ff.roa (raw, json)
Hash identifier:          gr5/AgLxV4O9DBDTCI7F4pmGRZlj7i55t2gkRWM1oNA=
Subject key identifier:   39:9A:77:A4:A5:30:C1:44:BC:0F:A1:04:CB:E4:A5:BA:8C:E5:C5:38
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584B328C44CDEEE265175D537F00
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     40401
IP address blocks:        2605:72c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:44:cd:ee:e2:65:17:5d:53:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=07d2ccad-0a40-444f-85fc-a5a7a30097e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:12:37:d4:96:ec:e8:d8:71:a6:de:6c:45:
                    c0:20:2d:9e:1c:96:d1:a5:b4:2c:4f:76:27:e4:25:
                    ba:9f:b4:9e:1c:45:81:8e:3f:0b:6e:9d:f8:07:62:
                    38:6c:07:bd:e5:c2:05:a8:6d:52:00:42:19:b8:35:
                    ec:df:ac:0c:47:f1:ee:86:a7:ee:b2:f7:3d:e4:53:
                    e3:73:0b:15:c4:6e:f1:1a:24:21:b8:18:81:32:09:
                    f1:f6:0a:6e:76:bc:59:5f:22:73:c9:4b:44:15:14:
                    f2:66:e8:b2:72:20:62:84:4f:8a:b9:c8:b8:00:60:
                    5b:d9:87:e3:3c:46:0b:b5:e4:2f:5e:15:05:ae:0f:
                    17:8a:1d:65:fc:99:f9:cb:d4:3d:b6:22:c6:a5:44:
                    ad:23:89:c3:dc:70:77:c1:7d:93:2a:96:2e:3f:6a:
                    2e:45:40:58:9f:b1:a4:69:76:33:56:a4:0c:ee:8d:
                    1d:b0:1a:5d:2c:35:b8:ae:a9:28:ab:a9:5f:bc:73:
                    d3:b4:d4:0f:3a:f3:38:59:e2:97:22:bf:77:6b:72:
                    ab:ea:dd:fd:f2:c3:3d:54:23:09:22:13:63:e6:26:
                    18:08:54:70:a4:4e:3e:05:22:3f:38:05:ea:28:f6:
                    c1:cd:24:8b:8f:d3:80:37:ba:89:ae:31:31:5e:1c:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:77:A4:A5:30:C1:44:BC:0F:A1:04:CB:E4:A5:BA:8C:E5:C5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/b8d397c7-de40-30e1-bcae-8b78956f87ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:72c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:57:78:f1:37:8e:c7:e5:b3:66:47:a6:d1:7d:84:a3:ff:ad:
         65:02:0f:53:b7:b7:24:02:b5:c2:d1:61:52:d3:96:68:6d:90:
         29:87:d3:d8:27:23:7f:55:c5:57:63:b9:ec:98:1d:95:05:c6:
         2a:a9:c2:27:ea:83:7e:ae:ae:a1:73:df:09:30:16:8f:df:85:
         2d:70:01:5f:ea:6a:2a:c0:c9:c4:e1:cb:6b:9e:bb:4a:8d:a0:
         fb:f1:58:7b:1b:27:99:5e:79:1c:0a:d9:19:6f:cd:e2:72:2c:
         84:88:5e:28:ec:d8:bd:f2:4d:7d:27:65:45:69:1a:fd:5c:f0:
         3e:0e:db:7d:61:e1:f0:c5:97:59:46:ba:e4:66:35:d8:31:2e:
         ef:18:d1:68:10:ce:47:23:95:96:7e:1b:2c:fe:6b:45:9c:04:
         96:e7:1f:d2:8a:1e:05:08:4d:66:96:05:80:b5:3f:db:72:96:
         1e:2d:45:3e:be:32:16:dc:cf:61:f3:9e:76:46:e5:9e:bf:76:
         a9:ea:1e:e2:50:7e:a4:ad:73:f8:0d:75:12:41:77:69:a2:47:
         34:5a:bc:3f:bf:e1:44:68:36:cd:65:38:b0:ab:73:fb:48:a5:
         31:80:59:4c:cc:29:6c:e2:22:94:e7:98:47:18:cb:12:db:41:
         7d:04:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:21:02 2025 by rpki-client