Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa
File:                     b0aeb068-9565-3d62-9153-36565ab91c51.roa (raw, json)
Hash identifier:          xeJDypORY2Kc3qCmRTVXF7MyC4A83p5HMLT9nDDfNfM=
Subject key identifier:   33:F9:AB:CE:60:81:35:22:42:90:A2:3C:C6:BC:BB:B6:71:F6:15:31
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584B25FC47712D2E9FD491D6D100
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     3819
IP address blocks:        2602:f69a:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:47:71:2d:2e:9f:d4:91:d6:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=4c3db01f-06fe-43c6-a690-55b72c51ed56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:e4:3a:aa:f7:7f:05:e9:41:0f:54:24:5f:
                    68:01:30:0d:31:5e:df:19:05:07:8f:2e:63:62:d9:
                    a0:41:73:b1:c8:d1:35:e6:bb:14:2c:c2:a7:eb:f7:
                    c3:0b:63:e0:06:5c:08:d8:95:6d:05:44:4e:4e:fd:
                    48:4e:f2:b6:45:33:41:eb:34:b0:51:6e:39:78:c5:
                    57:15:b6:b4:1f:f1:94:f8:f0:52:74:50:e6:5b:e9:
                    2a:f1:bb:bc:68:d6:da:84:a7:95:ee:e3:ed:2d:73:
                    cb:f3:22:dc:59:b8:ba:33:76:88:1f:3f:c2:e7:cd:
                    e5:07:00:a8:49:ce:db:c2:67:c4:fe:0b:b2:26:fd:
                    7e:23:1b:aa:a4:54:a2:2e:72:d4:2f:6a:2d:ab:8c:
                    19:0a:ca:03:e6:aa:17:c6:52:b1:fc:dd:a9:54:dc:
                    73:3b:7e:ad:f8:8b:ad:d3:eb:27:42:a9:00:b3:01:
                    e3:f4:20:a9:cf:20:73:66:18:f5:52:09:76:2f:14:
                    d1:45:02:da:85:3c:2d:01:e7:b7:99:4f:de:3e:54:
                    05:41:57:4b:03:94:99:99:d5:87:16:b7:f9:53:cf:
                    01:bd:c3:9d:9a:8b:0b:85:a3:bd:3a:e4:82:a5:f6:
                    08:e0:b4:97:f4:1a:90:4b:c7:b0:8a:7e:17:db:a8:
                    7a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F9:AB:CE:60:81:35:22:42:90:A2:3C:C6:BC:BB:B6:71:F6:15:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/b0aeb068-9565-3d62-9153-36565ab91c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:30:64:35:46:0e:b5:0c:26:b2:c0:38:dc:e8:a8:96:22:
         b5:2f:64:bb:ea:19:3f:19:b3:9e:31:c3:f8:3d:55:b9:ed:b7:
         0a:fe:3c:ed:78:13:9f:61:86:75:70:f6:89:f2:0c:5a:31:c1:
         ca:87:51:48:7d:c5:59:64:43:b3:cb:d8:49:57:d0:db:79:04:
         ff:1d:0d:45:5d:fa:5b:97:50:bc:46:e6:cb:f5:62:35:f5:5c:
         68:e4:ff:aa:56:b2:37:c4:d4:f9:8b:52:d1:c2:aa:40:0e:f0:
         2d:57:39:d3:61:8c:2d:f9:f0:63:fe:19:e4:d0:b3:ab:8a:a0:
         89:79:73:ec:ff:6b:8a:33:64:af:0c:a2:dc:56:ed:71:93:ee:
         8b:71:ba:54:11:57:10:38:53:c4:4b:77:cd:02:85:26:50:8a:
         b6:73:af:3e:69:f4:46:23:ec:08:b8:13:7b:b7:29:65:be:71:
         9f:fa:46:f4:49:14:25:aa:ea:bb:65:9a:e9:28:d4:b4:a5:8f:
         fa:4a:44:31:b6:67:fb:bb:37:d6:b1:62:47:9c:f5:8a:ee:32:
         f2:20:5d:14:91:7d:1d:5c:a9:28:ea:b6:b6:6b:50:0a:df:a0:
         70:ef:2a:78:bc:17:f0:ea:c3:6e:c4:6a:0f:08:58:c9:be:24:
         28:ba:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:44 2025 by rpki-client