Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
File:                     7f8d135c-0a0a-351d-8578-25795052890a.roa (raw, json)
Hash identifier:          +25vIdHzUsDM+2PbC4tY+ZM/HYKP3qZoBO06R8dmhBk=
Subject key identifier:   7E:7A:6F:47:22:6B:0C:36:0A:7B:BF:A6:CE:30:84:64:95:29:1E:30
Certificate issuer:       /CN=6088917c-c2eb-4059-97d2-b06df418ce7e
Certificate serial:       010D0C9F4328584B3DB6FAC6B36B251634066440
Authority key identifier: 23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     53358
IP address blocks:        2607:cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:fa:c6:b3:6b:25:16:34:06:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6088917c-c2eb-4059-97d2-b06df418ce7e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=3cc50bbf-75f3-4eb1-ab15-6bcdd8d982f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:e6:fe:32:cb:20:64:65:e8:d1:8b:0c:97:
                    94:7e:a4:b9:da:1d:03:63:8d:2e:fc:f9:e4:25:be:
                    c8:59:b8:60:29:fc:1f:7d:f9:eb:43:90:af:39:ef:
                    d6:21:8c:27:58:1d:d5:7c:91:7a:5a:f5:cc:aa:22:
                    c4:ee:00:50:e2:7c:d6:ca:62:ff:b1:df:68:72:a3:
                    cc:ac:a7:e0:f4:ab:80:41:58:f6:49:63:58:1e:76:
                    78:ca:3b:a6:01:87:8a:6f:ac:2e:9b:f7:af:62:eb:
                    0f:9f:71:f5:28:f4:e6:75:de:ba:2a:ba:1d:16:4c:
                    bf:d8:84:dd:b3:34:1e:1f:13:ef:86:85:f2:63:f6:
                    e8:74:b8:aa:d6:ad:4d:75:9f:d7:a7:7e:3f:63:63:
                    c7:2f:69:44:f7:d2:75:b4:6b:50:27:c1:88:5f:0c:
                    28:41:42:44:d3:18:64:74:8b:02:28:79:4c:00:4b:
                    76:7c:15:9a:aa:03:77:7b:d5:a1:2a:96:49:21:5d:
                    b0:1c:51:df:c9:13:dc:ac:50:b0:4f:82:10:4c:f1:
                    be:9b:ee:d6:f4:b0:83:8c:bb:95:dc:58:50:8c:ab:
                    95:f3:d1:90:4c:fa:f0:e7:32:53:d6:74:16:61:83:
                    0c:0b:5c:69:f0:e2:2c:bb:5f:f1:48:1c:ff:94:92:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:6F:47:22:6B:0C:36:0A:7B:BF:A6:CE:30:84:64:95:29:1E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/7f8d135c-0a0a-351d-8578-25795052890a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e/6088917c-c2eb-4059-97d2-b06df418ce7e.crl

            X509v3 Authority Key Identifier:
                keyid:23:2F:40:83:AE:0B:41:FF:D7:97:44:3F:36:86:26:13:3F:F5:A8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6088917c-c2eb-4059-97d2-b06df418ce7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:d9:b5:24:67:23:b6:01:ba:fb:ba:66:41:d0:4c:5c:15:
         17:21:43:00:31:03:af:93:a1:36:02:a3:f7:fa:8f:66:38:a1:
         34:3c:cd:03:8c:70:36:77:d9:29:fb:9a:15:9c:5b:30:b8:2c:
         4e:23:9d:92:4b:54:e4:fb:5b:5c:6c:77:d3:46:ce:ce:63:2d:
         b9:37:c7:c9:74:05:cf:1f:9d:26:78:0c:cb:4d:16:34:ea:17:
         85:3b:87:ac:f4:92:f0:10:73:2a:73:fb:45:4d:90:be:ea:5c:
         8b:a2:e5:bc:bd:ab:80:bb:26:d7:16:75:e4:20:3c:97:0d:14:
         c8:43:8e:4f:46:cb:ea:df:83:a1:a3:3a:04:e3:62:47:31:36:
         a9:2f:0e:8f:2d:3f:51:6d:11:df:af:86:95:41:6e:eb:3a:b6:
         07:e5:8e:b6:c5:ee:b6:fd:5f:45:df:62:5a:9d:57:d1:21:3d:
         e6:07:8b:38:20:13:22:29:88:fe:91:7f:ae:15:d3:0b:28:bb:
         18:7c:01:3c:de:98:3f:75:69:a7:d5:2c:04:b4:2f:1a:c0:c0:
         3b:37:19:14:43:f4:6d:51:82:74:d3:b3:a1:e6:35:87:3c:65:
         38:3c:04:bb:a0:3f:4c:81:1c:b2:01:76:06:61:3d:31:61:dc:
         bb:af:c9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:14 2025 by rpki-client