Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb260941-a106-3233-adab-da8e7a664457.roa
File:                     fb260941-a106-3233-adab-da8e7a664457.roa (raw, json)
Hash identifier:          ls1ItK6X1lst9DzJ5KSKYFDmnv+J72sI/fWKZOTop1M=
Subject key identifier:   1B:DC:71:7A:78:5C:75:16:8E:FE:D9:89:FF:57:1C:DE:C4:BC:DD:12
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584AB4EB75088BD6D04699649F00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb260941-a106-3233-adab-da8e7a664457.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     20253
IP address blocks:        2606:bc40:f1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:75:08:8b:d6:d0:46:99:64:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e5301545-9826-4665-be60-80b5e7c18e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:e7:c9:4f:f7:2e:72:41:a3:26:35:65:2b:
                    6d:a6:16:95:c6:9a:d5:cd:0d:c8:c7:e2:99:4e:b8:
                    ed:e9:a8:71:9d:5d:b0:89:e3:40:b0:5c:ac:e6:b9:
                    d9:ae:7c:57:86:ec:0d:6f:cf:71:da:78:d5:29:5e:
                    fb:4e:db:a5:3e:1b:98:2f:d0:98:46:08:af:d5:ce:
                    36:24:8b:55:fc:72:11:15:63:8e:0b:aa:bc:38:71:
                    6a:31:f0:e9:20:c8:68:12:26:b5:a0:3e:5d:22:dd:
                    be:2e:62:7a:58:0c:f6:26:f4:9e:e7:82:a3:6d:0f:
                    f2:c4:eb:52:58:9d:7d:4f:aa:d0:6c:38:45:a4:57:
                    35:71:7c:02:f1:7f:7e:0f:be:aa:d8:39:d6:1a:11:
                    df:a5:b5:75:f6:95:f3:39:71:54:32:1f:af:23:c6:
                    a1:b6:15:1b:dd:11:c1:39:c2:1d:83:ca:0d:45:4e:
                    a8:bc:53:ff:bb:60:37:0e:14:f4:b6:ab:cb:89:0c:
                    fa:a7:46:80:dd:ce:21:2c:e7:45:4f:53:62:55:cd:
                    90:97:3d:66:dc:f0:c9:a3:4a:29:d6:0e:a9:a5:cb:
                    f2:e7:a0:f2:d7:74:cc:b4:08:34:cd:ea:ca:c9:b2:
                    b8:87:f3:28:13:03:67:19:f2:2e:88:16:79:74:18:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:71:7A:78:5C:75:16:8E:FE:D9:89:FF:57:1C:DE:C4:BC:DD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/fb260941-a106-3233-adab-da8e7a664457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:79:78:87:69:15:cb:54:cb:76:fa:48:5f:d9:35:4f:d1:
         2a:17:e4:19:95:02:21:db:35:6c:4d:6f:5e:bd:45:8d:0a:ff:
         a0:93:d9:95:49:1a:05:2e:f8:fd:61:de:c3:47:5e:55:58:9a:
         a4:15:54:a8:a6:73:8f:a8:48:86:c9:aa:e8:1e:85:7f:47:8c:
         0d:e1:33:14:56:5c:af:32:57:0e:53:c1:de:a7:04:f9:de:34:
         18:b6:e9:e4:85:9b:d2:a4:fd:a7:8e:bd:9d:9e:52:1e:22:d0:
         d5:aa:77:de:d9:62:4e:b0:f2:51:32:52:94:99:36:ef:82:f4:
         c7:eb:db:e5:f1:f8:87:d7:69:a1:5e:88:cb:a6:d7:32:6d:cf:
         17:b2:63:25:48:96:d0:76:78:c2:b3:fe:8e:88:fd:c7:83:0b:
         3c:0c:d7:a8:34:a8:c4:cc:22:27:e9:ae:56:49:37:93:72:9a:
         bb:75:c6:f0:36:86:f8:8a:2a:3b:5a:ee:26:77:9f:cb:29:10:
         f7:e1:96:89:b1:4c:27:15:60:5d:a3:9c:80:43:58:c3:36:41:
         77:5d:7a:db:16:96:de:f7:2f:b3:7a:4c:07:e7:e0:3a:e9:e8:
         0e:91:61:44:59:c6:77:85:15:cc:2f:76:84:c5:1c:76:d5:35:
         ee:8e:f6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:15:36 2025 by rpki-client