Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa
File:                     e71f95d2-9c8e-3df6-8086-150c8baf2683.roa (raw, json)
Hash identifier:          moPUZOV3mAM6ubI1valg++SSfMAy4hzrDmBWRR4bAew=
Subject key identifier:   2B:45:E0:1D:75:BD:7F:35:15:6C:F1:86:C1:BB:1C:43:C8:AE:2D:E6
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F4328584B51A7E00BD47C06B7443FE080
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa
Signing time:             Fri 26 Sep 2025 04:26:25 +0000
ROA not before:           Fri 26 Sep 2025 04:26:25 +0000
ROA not after:            Thu 25 Dec 2025 05:26:25 +0000
asID:                     14203
IP address blocks:        2620:103:c006::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:a7:e0:0b:d4:7c:06:b7:44:3f:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Sep 26 04:26:25 2025 GMT
            Not After : Dec 25 05:26:25 2025 GMT
        Subject: CN=cbcf4b7a-47c5-4b47-b23f-d239cf53fb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:d1:39:34:23:6f:9a:5b:23:83:6e:60:f5:
                    98:54:1c:ef:fb:73:c6:d3:73:62:51:03:dc:ca:0b:
                    b2:7f:58:03:43:f6:42:3f:35:85:b8:07:f1:df:c6:
                    4b:06:97:0f:f0:71:f8:95:14:43:6d:0f:f8:2d:29:
                    86:e1:bf:d2:5b:7c:70:3c:cb:97:f9:16:49:11:45:
                    36:04:04:0b:e8:72:19:96:cc:3a:ec:92:40:4f:01:
                    45:dd:4d:a8:3e:05:5b:75:cf:7f:49:6e:42:db:4e:
                    31:bf:40:45:96:fd:1f:c0:4c:54:9b:5f:11:01:d4:
                    38:4d:0e:9a:1a:80:84:3a:9b:72:6b:74:d4:84:91:
                    5d:a6:36:ac:ba:5b:39:b8:22:47:e3:98:91:21:67:
                    dc:d0:63:cd:1a:eb:5e:33:98:50:6d:cb:9a:52:1d:
                    dd:24:51:be:d2:e5:02:37:e0:cb:a0:b1:11:b2:54:
                    63:ab:ae:9e:d4:68:75:5c:c0:dc:d3:96:43:a8:dd:
                    d9:b1:7f:d9:f7:e1:5c:9c:ed:85:8b:48:59:e4:1d:
                    de:c7:dc:01:e0:12:a2:ca:d6:b4:7d:71:83:29:12:
                    ce:9c:5a:de:68:67:ad:32:2e:c2:c3:77:fa:7e:7e:
                    6c:35:b4:36:52:3c:a7:a1:c5:76:93:01:75:6a:09:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:E0:1D:75:BD:7F:35:15:6C:F1:86:C1:BB:1C:43:C8:AE:2D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/e71f95d2-9c8e-3df6-8086-150c8baf2683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:103:c006::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4b:8e:d9:34:5d:99:01:a6:53:14:d2:8a:0b:43:79:30:a0:
         01:ff:43:44:7c:99:f7:bc:cb:c9:1b:2c:60:32:63:76:69:73:
         62:d2:f0:3f:4f:38:57:d0:6a:78:31:c8:62:9c:64:5a:1f:a6:
         bc:9c:b2:43:fc:f6:1a:2c:09:94:f5:a3:50:b9:37:77:b2:b6:
         50:10:20:59:44:11:0d:ee:bd:bf:e4:c8:17:1d:db:02:b4:b2:
         77:93:f2:52:77:82:b9:9c:c8:14:fd:31:2f:89:84:ec:b5:f5:
         36:c3:56:72:8e:f3:86:19:b8:7f:b5:ab:b5:7f:07:fe:2d:d9:
         0a:31:cb:2c:7c:2e:ba:5f:a6:15:d0:73:05:4e:cb:62:50:6f:
         58:28:da:b1:52:8c:ed:41:aa:fd:e4:dd:df:10:09:df:90:2f:
         90:70:60:2f:35:48:f9:8d:c9:65:05:8f:fc:f3:5f:4c:09:fd:
         96:e4:cd:03:fe:9e:1d:6f:72:d8:ac:c0:57:8a:fa:9b:b6:6f:
         d3:12:bb:e8:b8:ac:3a:91:ba:3b:1e:e2:91:d5:e7:49:eb:bc:
         68:a4:8c:8c:b0:97:d7:03:19:ae:a2:ff:ad:fd:de:00:55:bd:
         a1:b6:3c:7c:92:16:37:8c:25:54:d9:cb:d4:39:ff:e9:37:8c:
         dc:86:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:29:40 2025 by rpki-client