Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/5bca9788-0310-3be2-9814-b5eb14db783d.roa
File:                     5bca9788-0310-3be2-9814-b5eb14db783d.roa (raw, json)
Hash identifier:          qMMRNhz+7SJH/XEXRDLmc2kGGAn8uYClHC7yVUf33Zo=
Subject key identifier:   9C:A2:96:83:CB:D9:61:8A:81:5C:33:96:21:75:E5:6A:22:F3:50:6D
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584B64CE716AA311EA0ED2024E80
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/5bca9788-0310-3be2-9814-b5eb14db783d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     16509
IP address blocks:        2605:84c0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:71:6a:a3:11:ea:0e:d2:02:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2c466332-eeb9-4040-a954-06ee0e25f4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:6a:1f:ba:6c:c1:ca:8f:a6:b8:2e:77:66:
                    ce:d1:72:57:a6:05:40:3f:d2:d3:9a:18:91:c0:0b:
                    cb:cd:3e:d7:4a:5b:f7:ab:95:7f:a5:ac:84:f3:30:
                    05:98:a3:5c:04:5b:1f:9c:db:b4:f7:a3:ae:5c:bf:
                    c2:e1:bd:e3:ea:23:6d:55:26:bd:fc:da:5d:01:03:
                    70:9f:68:43:a7:4f:b6:7d:d1:18:70:9f:c1:23:59:
                    01:ab:1f:01:68:13:6a:69:55:17:c5:47:ff:84:06:
                    47:32:ce:98:ae:5c:5c:16:bd:c3:15:b0:08:65:d6:
                    42:92:d9:7d:6f:19:b9:99:cd:c1:2d:25:b8:fd:85:
                    79:f7:f8:43:12:8f:d2:0d:44:45:18:ce:f2:b3:4a:
                    70:11:90:55:4b:75:5b:d9:a5:f5:c0:ff:f4:14:38:
                    34:15:07:bc:f6:d2:02:9e:91:53:51:79:bf:2c:30:
                    57:43:1c:9f:1b:42:32:d7:6e:a1:0f:24:4a:7a:a9:
                    f0:83:49:dd:a2:ca:05:80:51:69:c9:e6:18:a1:77:
                    ea:15:ac:cf:87:35:01:05:e1:de:08:f8:9d:5f:c0:
                    c0:77:ab:71:b0:30:aa:42:2f:c8:d7:d4:a4:ea:51:
                    dd:02:b8:12:d3:96:c5:b5:cd:93:e2:21:0c:b6:7c:
                    d2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A2:96:83:CB:D9:61:8A:81:5C:33:96:21:75:E5:6A:22:F3:50:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/5bca9788-0310-3be2-9814-b5eb14db783d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:84:78:d1:ea:5a:46:94:44:31:bb:0f:37:9d:76:48:15:83:
         ec:aa:ba:f0:ff:a6:6c:07:62:e2:54:cb:1b:05:4d:eb:b1:4a:
         dc:eb:75:09:60:26:78:4f:bf:2f:83:9f:cf:e6:af:9d:43:1d:
         37:97:5f:e6:78:06:7e:01:85:85:13:88:7d:f5:20:41:cd:ef:
         13:0d:70:8d:8a:71:c2:38:99:6a:db:94:d7:0e:b6:55:3c:88:
         2d:16:6d:30:7f:3d:22:7a:a3:2c:17:dd:e6:2c:d4:c7:0b:5b:
         29:49:9c:8f:bc:7c:6e:30:33:73:0f:c7:6a:eb:53:a9:f2:97:
         70:6d:01:27:3b:11:ab:58:9f:58:f9:fb:5b:75:21:84:e4:c6:
         6e:97:b6:88:84:2d:98:a7:51:12:aa:f2:de:3d:e3:a2:6d:d4:
         f8:d0:8d:01:eb:8d:38:66:c3:58:03:eb:84:21:a9:17:f3:07:
         75:64:f8:43:51:8f:97:1e:3b:c8:f8:88:f0:01:69:80:e2:7d:
         0d:40:98:ba:16:92:76:30:46:71:03:f8:e2:db:bc:43:76:7f:
         d5:15:5f:1a:71:15:79:13:3d:27:42:11:bd:48:a7:7d:ff:f8:
         32:41:53:93:73:df:da:db:92:c6:86:f7:6c:43:32:d0:88:f4:
         a1:e5:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:08 2025 by rpki-client