Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
File:                     69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa (raw, json)
Hash identifier:          OCOrmPX50ZzpB1ljWU6mQ4+WuL86miCEDCn8XGE/U9c=
Subject key identifier:   30:B1:AF:3E:8F:0A:3D:9A:0E:87:89:7E:C9:86:04:AC:D9:2F:76:5C
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F4328584BAA979DF2962C11CC62882280
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     7212
IP address blocks:        2607:8a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:9d:f2:96:2c:11:cc:62:88:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=e5c50657-69eb-4d85-8624-d755c1cb9dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:09:02:6d:a7:ce:52:82:2b:47:b7:c1:41:
                    2d:0b:37:e4:d8:22:45:52:a7:27:a3:b3:a8:c3:b6:
                    47:a9:a4:9a:6e:47:c5:2f:b5:2c:67:f6:b4:ba:bb:
                    f2:db:f5:45:6f:4f:b6:8b:20:97:de:9f:02:38:1f:
                    68:02:ae:0d:90:7d:11:65:dd:09:49:4b:14:78:0a:
                    52:c7:2d:22:eb:c7:5e:38:c2:29:9f:38:80:5f:f4:
                    8b:cd:15:b7:9a:8e:3f:6a:93:a7:60:12:e2:0d:ab:
                    f3:3b:fd:ca:0a:47:7d:bb:35:ed:38:fa:60:3f:04:
                    a1:61:32:13:c7:1a:fd:af:ca:12:17:7d:10:e8:bf:
                    30:92:2b:f9:da:95:8d:1b:72:11:7e:31:7f:f0:a7:
                    75:0e:bc:f3:f7:f0:ea:aa:3b:c4:49:3b:33:59:e7:
                    e2:b7:84:56:f6:8b:4b:14:6b:82:2d:42:cc:59:d9:
                    26:61:97:36:3e:00:99:27:22:25:68:56:ad:43:8c:
                    f8:0c:68:f2:ee:cc:3e:6b:84:c8:8c:61:8b:b2:a2:
                    05:68:32:89:67:91:3e:50:5f:5a:08:da:26:bc:f9:
                    bc:ba:cc:c0:dd:f7:9e:43:b5:69:6a:05:3f:d8:75:
                    43:ab:1a:cc:ec:47:9f:64:2a:8f:2a:d4:63:59:07:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:AF:3E:8F:0A:3D:9A:0E:87:89:7E:C9:86:04:AC:D9:2F:76:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:71:2d:a3:13:a7:68:78:b4:5a:7f:ee:cb:a0:62:b5:28:
         ae:7a:9f:4e:e7:3d:1a:72:6b:c3:7a:9b:3b:2b:34:36:19:62:
         11:6d:65:4c:59:50:0d:98:e1:41:27:3d:40:e2:30:44:00:61:
         21:f1:6a:0e:ec:2f:9c:4b:5a:09:9f:c5:74:62:8f:8e:84:be:
         a4:e9:b7:d8:8f:fb:52:f6:98:1e:26:3f:3a:cd:62:ca:00:a8:
         88:a7:ad:78:a9:b8:a2:10:ce:3e:7f:0d:77:d8:ab:d6:cd:9a:
         01:51:93:90:18:c6:bc:2a:9a:3e:d2:e5:7a:79:84:89:9f:9c:
         83:fd:3b:64:f0:ba:c6:1e:c4:d3:48:07:96:bd:8c:2d:b4:37:
         ce:93:da:49:e8:87:59:91:83:8e:08:c0:df:f9:1d:c7:41:40:
         4e:f1:10:d1:0b:12:c5:20:c8:f2:2c:c7:b6:36:e8:18:17:88:
         3d:98:38:73:00:ee:7e:4d:43:86:fe:8a:b6:30:12:67:b6:27:
         3f:83:d6:f3:ff:ae:9d:f6:97:2f:12:ba:bf:7a:1a:2d:26:4b:
         49:bd:41:88:61:f6:0a:27:36:7d:bd:0d:77:e6:59:51:f5:cd:
         e0:06:33:7f:72:9f:f2:d6:f7:7d:31:34:a9:50:8e:d3:a3:5a:
         80:aa:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:46:00 2025 by rpki-client