Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa
File:                     b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa (raw, json)
Hash identifier:          7LflrLgBltfGRh4otC0f/Sfv4LwOiesMrOniCXj1i7A=
Subject key identifier:   47:EF:6D:12:68:68:02:E9:CF:0F:2F:1C:17:7A:FF:AE:FB:7B:90:78
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584BA7CCE573D00D9C70BC578D00
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     17390
IP address blocks:        2620:1f7:c040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e5:73:d0:0d:9c:70:bc:57:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=9d072a1d-2598-45dc-849c-a96b6bf79e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:f3:ad:26:8b:3b:63:7e:7a:e1:ff:e4:ab:
                    90:0f:d9:7b:7b:c2:fb:46:74:3f:ce:f3:19:09:97:
                    02:c2:28:2b:e5:c3:c2:2a:7d:de:b6:0a:d9:c2:17:
                    98:46:26:ee:2c:a8:b3:05:11:91:81:ad:a0:6c:49:
                    17:2d:fb:16:4e:38:96:b1:ca:7b:ea:37:58:39:1e:
                    c6:38:59:75:84:92:44:cf:d1:5e:85:07:b0:a0:b8:
                    20:85:b1:c8:a6:95:97:82:d0:47:cf:92:97:af:aa:
                    6d:d9:0f:b8:d7:a9:c8:a1:85:98:8b:20:5b:df:c9:
                    29:5a:81:f7:e4:9d:ea:a1:29:5c:6d:c0:5b:8c:b0:
                    8c:1c:a1:78:72:50:94:11:2d:4d:57:cf:fd:6b:ac:
                    ea:ed:4f:ae:1b:35:5c:9e:f1:3f:3d:7b:d6:ff:f6:
                    fc:ac:a5:5c:c3:f1:3b:cd:a8:a9:bc:23:36:4c:c9:
                    06:bf:36:90:7b:bf:58:59:4d:4e:84:c9:2f:bb:8b:
                    3f:30:b8:e3:6f:2d:48:42:49:37:89:df:7f:a2:27:
                    2b:ab:b6:62:36:62:6c:ab:d0:8f:b6:4a:eb:e8:03:
                    77:74:f7:98:56:20:16:8c:14:11:d6:ec:32:85:be:
                    98:26:2e:57:90:9f:bd:b6:4a:30:e0:b3:c7:3a:9b:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:6D:12:68:68:02:E9:CF:0F:2F:1C:17:7A:FF:AE:FB:7B:90:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/b7c6538f-12e3-3bc0-96cc-22ae9259c182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b5:38:d7:90:1f:a4:f1:e4:64:22:4d:c3:35:b8:4e:33:c6:
         7c:53:2d:ac:f5:37:0a:fa:b5:68:25:6d:43:c0:dd:f6:d7:7a:
         c8:67:75:9e:fa:3d:c6:b2:17:ee:09:72:50:85:7b:e9:cc:61:
         14:f7:40:8e:73:d8:11:f4:8e:dc:1c:48:8c:57:66:b5:0f:b5:
         87:bc:ff:be:bd:6b:b9:08:b5:e4:e0:f5:99:c4:09:40:f5:c2:
         98:62:c1:2d:7d:40:0c:74:39:6a:50:b0:be:cf:80:1a:89:8b:
         e6:a7:c0:f3:10:ed:25:cf:fc:00:95:08:fc:24:20:87:42:48:
         01:2b:8c:44:95:9b:27:d9:31:03:0c:ed:d9:0a:d2:d4:46:14:
         0d:e9:a0:cd:39:94:c2:98:7c:81:78:14:3d:5e:d8:e9:9d:b9:
         01:9b:79:41:c3:f3:df:7b:7f:e5:74:2c:29:bc:e0:5c:37:0c:
         9b:6b:75:81:99:1c:d3:b7:11:f6:d5:f3:29:56:90:d2:02:1c:
         1a:7a:0f:07:0d:32:d2:27:3d:a0:9e:71:58:59:d8:0f:08:22:
         dc:b3:f4:e1:1a:4c:92:2a:77:26:f9:a0:d6:bd:1c:17:a7:a1:
         72:dd:bc:1b:ab:20:90:91:4b:34:26:93:a6:b2:cc:75:b2:d6:
         52:f8:0f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:34:43 2025 by rpki-client