Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa
File:                     d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa (raw, json)
Hash identifier:          iUsFrJ1N2HGsEPwDKSdNLlcuvUDR2mL38ENsNFxmAQY=
Subject key identifier:   77:1F:2B:0E:7C:5B:F2:67:06:F0:E2:6A:B2:99:D1:B4:24:E2:4D:00
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584A980028E93A9703986B46AC80
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa
Signing time:             Mon 21 Jul 2025 16:23:57 +0000
ROA not before:           Mon 21 Jul 2025 16:23:57 +0000
ROA not after:            Sun 19 Oct 2025 16:23:57 +0000
asID:                     398700
IP address blocks:        2605:cc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:00:28:e9:3a:97:03:98:6b:46:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Jul 21 16:23:57 2025 GMT
            Not After : Oct 19 16:23:57 2025 GMT
        Subject: CN=1aeb9a90-4fb8-42e3-9220-aa52570a7fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:45:a1:58:94:b6:96:da:e5:8b:73:92:b0:
                    53:76:9f:99:53:64:c0:68:89:10:64:24:41:9f:73:
                    0d:0c:7c:3e:70:fd:60:b3:eb:1a:89:ae:6a:01:67:
                    13:68:f2:f6:34:ac:7f:b6:93:45:35:60:10:74:1b:
                    ec:83:ec:34:4f:4d:5c:38:e8:9f:4c:b3:0c:b9:c9:
                    f4:b6:a9:01:38:c1:1c:1e:cf:f9:be:86:50:c9:37:
                    2d:08:13:0b:35:5b:fd:53:42:c2:7e:f6:b5:5a:f9:
                    da:7a:ed:76:14:77:6c:51:4d:87:3c:c0:a1:a4:a7:
                    8b:09:a7:cb:dc:23:5c:b9:8f:4d:52:53:02:f5:ad:
                    2e:ca:cc:eb:57:a9:55:73:9e:be:94:45:d8:bd:92:
                    00:c3:77:3e:f5:92:ff:97:34:f0:7f:12:32:07:75:
                    2a:5a:cc:b5:c2:69:76:73:27:ee:6c:03:43:74:d9:
                    6a:7f:8b:d8:7d:f3:7e:9e:8b:2f:38:15:dd:b8:c7:
                    3e:b8:29:70:87:1b:b0:d1:7d:6b:58:16:08:8a:b9:
                    42:18:d9:d4:2a:79:cf:7b:37:24:7b:cc:df:bc:fd:
                    0a:fb:2a:22:1e:39:72:da:e6:87:b8:0d:91:f6:05:
                    93:ed:cb:f0:15:25:25:bc:d2:77:9c:28:5b:e9:c4:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1F:2B:0E:7C:5B:F2:67:06:F0:E2:6A:B2:99:D1:B4:24:E2:4D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/d8cc4dff-a7d1-34e4-85ff-10796d48e7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:98:de:7b:94:9b:d4:7d:0c:4c:c1:14:69:eb:a7:8d:62:7b:
         f3:e5:80:ce:04:f6:4e:2a:87:8b:e5:ae:ba:f6:52:e3:78:25:
         b9:42:c2:35:43:d6:1d:c5:0c:77:66:2e:39:5c:11:42:e8:90:
         d0:c1:17:11:e1:1f:d0:35:43:8b:eb:c1:ad:23:f2:fd:ac:d8:
         21:72:d5:ee:72:48:f1:41:0b:02:f2:79:b0:ac:9c:a8:61:1a:
         40:d7:53:2a:05:a7:82:3b:86:e0:b9:72:ef:cb:f1:8e:da:3b:
         19:5c:ba:36:76:51:81:41:13:4b:65:69:39:90:c5:33:ad:4b:
         56:9e:70:d0:a2:d3:7d:7d:75:6e:ff:52:fc:51:fe:04:fa:54:
         3f:bd:9d:d4:5a:4a:d4:2a:28:c6:8b:f5:3c:69:0c:32:b6:c8:
         52:5a:43:ec:6b:31:77:07:cd:b7:b6:ea:66:44:1e:62:58:35:
         fe:cb:2f:c9:51:5f:d4:a3:a5:3f:13:78:58:78:11:09:04:ba:
         09:09:56:af:8d:3c:6a:98:fc:09:0a:20:b4:25:09:7f:98:69:
         84:b3:09:b0:6c:ab:fd:77:ee:a0:97:bf:9a:8f:b3:ab:22:96:
         a3:ab:ec:3a:87:f6:c0:6c:51:bd:35:50:d2:55:f0:cd:61:42:
         df:0d:34:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:10:50 2025 by rpki-client