Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa
File:                     bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa (raw, json)
Hash identifier:          Z87H31e6+s63iqKmA9xtrTAXDUaJC2wCyjWT4lo489k=
Subject key identifier:   50:27:D0:83:38:FA:23:4A:52:A6:99:6E:D6:C2:2C:0C:08:2C:FC:2E
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584ACB40E48A72CC343ECB11C400
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2605:84c0:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e4:8a:72:cc:34:3e:cb:11:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=ef951fbb-3b2b-4b17-b94d-4cacc02e1cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:6c:ff:d6:15:fe:2c:14:d8:27:e6:81:c7:
                    3f:1d:a7:5b:96:ac:e2:32:c5:ae:63:c8:90:ed:88:
                    26:2d:eb:a5:d9:d1:e8:0e:92:d0:68:49:26:27:2e:
                    ca:6d:0a:bb:b2:96:39:64:37:92:63:ce:ca:12:fd:
                    4c:78:0c:fe:fb:21:f8:7d:f7:f3:ad:31:e0:c9:e9:
                    e3:9f:e7:06:04:d0:39:4c:4b:39:bc:99:90:b3:ad:
                    22:ea:5d:42:75:75:c0:3b:ba:e1:99:ac:98:4f:3d:
                    53:e7:de:de:56:6a:eb:9c:ae:8b:23:4e:37:fa:8c:
                    9e:1a:08:cf:94:e8:0a:2b:4b:36:a4:a8:0d:4a:19:
                    31:98:b1:82:82:2e:30:5a:af:61:d5:63:6f:6d:2a:
                    50:fa:fa:46:f7:df:79:c4:d4:a6:80:c3:21:60:c9:
                    93:c0:d5:ab:aa:3d:66:f7:b1:d1:e9:c6:5b:42:45:
                    73:5f:bc:54:ee:95:bb:33:83:4b:30:1c:ac:c5:b5:
                    6c:32:aa:80:22:68:dd:db:69:14:1c:0f:7f:ee:5d:
                    36:d2:03:6e:b8:69:6e:f3:e3:69:13:19:c0:c9:39:
                    8d:5c:0a:ad:76:ae:53:63:e7:3e:33:cb:7f:f8:77:
                    d7:3b:42:9f:ec:19:cd:4c:ca:57:5e:e9:b1:cb:81:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:D0:83:38:FA:23:4A:52:A6:99:6E:D6:C2:2C:0C:08:2C:FC:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/bd1a2e9c-e288-3f4d-8934-fcbd347671d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:de:54:42:ba:cf:84:88:a4:d7:5a:cb:b1:5e:eb:b0:80:10:
         ec:fe:e4:90:e3:c8:c2:c3:71:fd:a7:9a:ed:e2:f8:75:e6:14:
         ef:3e:e2:66:9a:1d:06:67:57:a3:9b:72:c6:e4:c7:57:0a:66:
         60:f5:f6:bc:bf:05:85:6b:d8:f7:02:7b:0c:b3:c3:38:8a:87:
         3c:68:da:6e:0d:a9:b4:15:b5:2c:62:df:42:01:30:4c:62:c5:
         7e:c1:01:fc:4c:37:00:7a:52:00:30:b8:6a:ca:b6:07:38:b7:
         66:2f:d5:8a:2b:fb:0c:16:56:da:ea:e2:2a:9d:e4:41:fd:17:
         de:da:1b:6d:7a:28:86:0a:5b:ab:d0:74:a8:6e:af:fb:a5:c7:
         d7:68:b6:6c:38:bf:ed:e5:e3:8f:b1:02:51:7e:87:b3:b5:9f:
         43:ad:a2:e1:71:53:71:2b:e5:9b:7c:dc:d9:dd:68:34:ad:7f:
         3d:84:bf:ce:27:19:7c:91:84:1b:56:6b:3e:e9:0e:0b:d5:d9:
         f8:ff:df:09:6d:c0:ec:9a:ab:3d:89:ee:5d:f7:43:f8:2e:4e:
         1c:87:37:aa:9b:95:4f:39:a8:11:2e:50:0a:64:82:27:4f:72:
         04:67:4b:98:a7:8b:d2:c8:0e:c2:32:aa:47:11:7f:ec:65:d9:
         5a:97:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:48 2025 by rpki-client