Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
File:                     5cb86780-eead-3402-9ecf-8879529d2c03.roa (raw, json)
Hash identifier:          BB+yQQQBppgXj5P1cxfiAeh+ngqvaNj6AluosdwJgdU=
Subject key identifier:   D8:72:7B:14:5D:C3:C3:50:9E:65:8D:3B:27:FD:6F:3C:A3:25:0D:0F
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B33F19EA990C3E8B7441EF040
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     2152
IP address blocks:        2607:cc80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9e:a9:90:c3:e8:b7:44:1e:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=1b3a3078-de62-4c9d-9bf2-7b6cd3a79a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:4f:28:88:18:85:61:a5:39:98:fa:90:ad:
                    c6:ba:c2:ce:31:47:c7:0c:39:30:8a:4a:28:83:fd:
                    1e:bc:4f:d1:59:d9:24:ad:33:87:a4:c8:f4:a1:52:
                    1a:c6:0e:62:aa:35:31:40:a2:c0:46:56:3d:91:4b:
                    7d:91:f4:bf:c6:88:2d:ee:e0:0e:73:dc:f4:05:fd:
                    ef:82:71:16:44:d6:a8:cf:e5:21:0f:6a:d9:1c:a4:
                    80:c7:28:6f:0f:5e:fc:e6:ed:ea:ea:09:ff:59:9a:
                    c9:51:75:56:78:f7:48:bc:ed:b8:1c:8c:b7:fa:7c:
                    12:6c:c9:a4:9d:2a:cf:62:65:b7:27:f0:b2:f7:a5:
                    f2:9b:40:67:c3:3b:31:33:c3:6e:a7:8c:71:52:24:
                    73:d3:70:cf:bc:18:ed:0b:48:e6:1f:b4:fc:21:cc:
                    b4:ca:c0:78:69:76:8e:c7:ee:3d:77:8a:96:cc:d4:
                    9a:7d:36:40:ff:c4:1e:3f:c4:96:66:f2:51:68:88:
                    db:96:26:9d:95:6f:ad:7e:45:91:fa:d1:d7:6a:26:
                    c5:7c:ea:bd:e3:ab:33:96:8e:ea:44:34:e7:db:84:
                    4d:0d:e0:96:93:16:79:74:d6:d7:2f:c4:f2:2c:89:
                    d6:bd:c2:28:bd:ce:fe:36:cf:fa:23:04:fb:bd:8a:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:72:7B:14:5D:C3:C3:50:9E:65:8D:3B:27:FD:6F:3C:A3:25:0D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:5d:f7:4e:ca:c4:10:7d:fa:22:08:d9:74:ad:08:2d:94:6f:
         1b:f0:0f:e7:0f:ad:09:5f:32:c0:2e:4f:17:73:63:47:45:33:
         86:81:a8:b6:86:3d:49:f1:0a:bd:01:65:12:4f:af:c0:04:8b:
         4c:31:b1:8c:53:21:72:7f:67:b2:09:cb:d2:ff:b1:e8:fb:f8:
         11:1e:1b:42:30:f4:38:cd:84:94:be:25:68:b2:8b:69:1e:ec:
         83:86:7f:c9:76:15:c7:a7:50:d5:10:ef:42:d0:61:40:e6:ae:
         f2:ef:59:5a:ac:19:62:6f:bb:15:06:cf:e9:96:cd:72:67:96:
         5f:70:90:d1:e6:c7:f1:e9:aa:28:2d:dc:fa:94:cd:1b:9d:cd:
         92:15:99:91:5e:6e:11:75:11:0c:4b:63:87:be:3a:7c:43:5c:
         5a:7c:6b:70:02:54:cc:93:d2:1b:8a:d7:d3:7e:ad:4d:21:ab:
         45:05:32:b5:2b:c7:b7:58:4e:18:bd:6f:a4:5b:7c:e4:09:26:
         51:5d:a9:6c:56:91:1c:91:85:4f:06:d0:07:99:65:b6:9d:5d:
         77:83:42:e4:87:2b:cc:2e:3e:24:00:61:d2:ac:e0:33:07:d9:
         92:a6:92:0f:8c:83:0e:92:b1:b6:e0:ad:a3:2f:96:0a:f2:b3:
         09:21:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:28:55 2025 by rpki-client