Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa
File:                     97ad094c-da35-3d80-8689-c761db2adeeb.roa (raw, json)
Hash identifier:          YotgYmJSGgaeXm0oNbJyU3COyox3/kuqgAqlxXFgRFE=
Subject key identifier:   72:15:4C:F7:68:32:C0:1B:EA:F3:63:50:E1:DE:BA:93:24:49:16:7B
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584B7F520FC1427E0BA439343EC0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     8070
IP address blocks:        2607:f368:b004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0f:c1:42:7e:0b:a4:39:34:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=fb15a92b-6952-4ebf-94d6-5ee6ca15e052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0c:9d:06:7e:46:fc:ac:78:cb:ee:c5:2f:0d:
                    00:df:14:35:71:7e:0d:07:14:e0:82:8a:0d:04:2b:
                    c0:6f:cc:89:89:a4:b1:c6:1c:47:73:10:0b:5e:f2:
                    30:b4:be:bf:29:1d:e6:b4:32:0e:55:ad:9e:09:a8:
                    c4:b0:49:35:3a:62:44:c2:70:80:7c:91:86:1a:f3:
                    22:68:08:97:d2:bb:4c:ae:a0:02:8a:84:ba:6e:2c:
                    f6:e4:d5:cf:d3:2e:44:7f:80:8e:cb:36:bc:31:db:
                    f4:05:69:6b:bb:1c:25:27:8d:bf:21:0d:36:f9:81:
                    dc:2d:7e:7a:98:39:63:55:8d:db:9a:9e:36:02:05:
                    06:a0:35:b8:05:d6:fe:0d:b2:70:0e:01:89:d8:48:
                    d7:e9:77:69:3f:fc:eb:ad:9b:47:cd:4a:ed:44:b0:
                    d0:6b:72:70:a7:4e:ac:24:14:dd:e4:b0:37:e0:58:
                    36:93:d1:c3:e9:03:7a:7d:a9:20:1d:05:c2:10:e5:
                    fd:4d:fb:ae:36:69:e2:fd:af:68:86:cd:23:0c:b1:
                    7f:3e:22:89:36:7d:c9:a2:34:54:2b:c3:11:2f:2e:
                    d9:86:e6:68:00:8e:66:67:dc:b6:0c:d0:5c:a5:67:
                    f7:be:a4:aa:16:95:e3:df:c5:69:c7:79:c2:5e:e0:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:4C:F7:68:32:C0:1B:EA:F3:63:50:E1:DE:BA:93:24:49:16:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/97ad094c-da35-3d80-8689-c761db2adeeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:b004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:42:e9:6c:b0:9a:02:60:48:88:cb:11:8f:87:12:83:75:ad:
         05:d4:83:bb:41:a0:3a:19:90:5f:c8:ec:e1:0f:36:18:5b:c7:
         01:60:72:3e:b1:59:11:85:37:ea:a6:74:e4:a8:20:88:02:11:
         11:41:70:64:32:52:49:49:ca:b1:d5:ca:81:7e:4d:91:ee:ad:
         7f:10:07:22:b4:dd:6b:8d:2d:aa:19:bc:c2:bd:f2:ba:c7:84:
         64:58:e4:ef:e2:e9:43:a1:ce:b0:0c:66:a7:50:bf:fc:02:89:
         e7:85:9f:c2:6f:40:ea:df:aa:6f:47:22:53:b3:91:47:01:0e:
         14:e7:9f:71:84:7a:9f:04:5a:79:6c:6d:1f:88:aa:12:ff:0e:
         70:ba:86:e0:87:83:0a:dc:9f:ec:f1:cc:51:cd:3a:07:36:cf:
         28:95:35:a4:08:88:a8:7a:ca:c7:10:16:d0:88:2c:36:2e:a3:
         28:96:6b:ca:9d:a4:34:c2:e1:40:61:66:0f:e3:4a:22:28:f1:
         66:79:5f:21:19:5a:35:72:5b:36:6f:38:78:0e:bf:a6:75:96:
         e3:3a:9c:5a:53:1b:83:2b:1e:c6:4a:32:b8:a5:ae:bf:31:54:
         92:5c:b5:f1:ec:ea:57:c8:cb:33:ad:2b:63:1e:8c:4a:2a:a4:
         ea:b7:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:14 2025 by rpki-client