Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
File:                     cd15af34-f6a2-3d65-8643-9862111885bf.roa (raw, json)
Hash identifier:          4Rcpexju7Q1OMLWoZ2xiT11QJ0qneSMWtCVarJ2cyrk=
Subject key identifier:   E9:9E:67:DE:4E:E3:BB:23:35:97:02:93:A4:FF:4E:F2:CB:A5:07:74
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584BAEC7B7AF63DC70E7B887A780
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     12189
IP address blocks:        2607:6000:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b7:af:63:dc:70:e7:b8:87:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=16631ee3-678e-4ae4-aa24-d2680ff3b1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:21:79:31:5d:9e:3e:9a:70:66:da:41:4f:
                    77:98:ba:23:b2:4d:57:e8:4d:74:ce:e2:dc:57:32:
                    10:49:37:0d:20:9f:cd:36:b7:df:dd:9c:eb:a3:44:
                    f7:52:cb:b8:21:52:a1:7e:de:21:fd:77:b1:3e:c5:
                    80:00:56:3e:e4:e1:a8:88:67:10:3e:cd:1e:1e:27:
                    02:20:a4:28:8c:d5:ce:8e:d7:45:20:d9:8e:0a:71:
                    ef:d2:d3:aa:38:d4:60:28:be:85:b6:f6:2e:a3:d8:
                    07:09:8c:dc:c0:f1:1e:03:4d:82:14:66:3a:1e:d9:
                    2f:4d:ef:e4:cb:de:b3:96:a9:65:36:4b:0b:69:ee:
                    5b:0c:14:1e:1a:72:6e:8f:2a:0d:6c:cd:a2:50:88:
                    78:c6:e6:b7:27:b2:94:6f:b1:34:8b:37:76:1f:ff:
                    42:38:77:12:6a:82:2a:b4:b3:3d:04:11:22:f7:cf:
                    53:4a:6a:b8:29:d4:04:89:54:3e:85:12:7a:45:ad:
                    7d:28:7d:4a:22:b5:bf:ca:b4:fb:e7:9d:93:79:9b:
                    b1:62:f4:5d:ee:83:c9:c4:e3:0c:b6:2a:84:dc:10:
                    6f:84:d2:51:a7:18:64:76:e3:2c:bc:a1:4f:eb:e1:
                    1f:71:c0:17:21:01:f4:69:5e:28:5d:f0:4f:8d:3a:
                    9d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:67:DE:4E:E3:BB:23:35:97:02:93:A4:FF:4E:F2:CB:A5:07:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd15af34-f6a2-3d65-8643-9862111885bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:bd:05:6b:24:94:f8:f8:53:fa:a6:29:61:74:1d:4d:03:
         49:66:5f:ff:70:fc:8d:ce:9f:d6:90:f5:b9:eb:f3:7e:5e:c8:
         4e:ef:be:f4:33:b3:1e:ae:a0:0a:d6:99:d5:af:1f:40:bd:f9:
         a5:c5:3c:c2:e7:e8:f3:41:25:1b:41:c5:57:19:28:dc:1c:a7:
         85:00:04:3d:6e:f7:1e:49:bb:0d:a3:6e:02:15:e3:d2:b7:26:
         21:65:30:96:9e:e2:89:53:cf:f0:13:7e:54:c8:57:66:5b:2e:
         ba:3d:a5:0d:b2:9c:98:25:de:10:3e:60:d8:29:63:b4:45:76:
         56:60:43:4f:bf:26:10:64:13:14:68:e2:b2:d4:95:b3:c7:28:
         67:e1:0b:87:f6:0b:c6:4b:87:40:00:74:9b:3d:34:a1:7c:5a:
         04:54:83:f2:24:d1:34:48:61:90:a7:e1:8f:09:0b:5d:37:22:
         d6:c8:94:4c:ff:19:30:f9:80:18:19:a9:08:f3:70:a0:40:a2:
         c6:08:ef:5a:d1:e7:93:1d:92:4d:e0:5b:85:14:02:e4:55:4a:
         20:9f:fd:b6:29:f3:96:07:ad:58:3a:b2:b3:1e:61:24:29:6c:
         c4:4f:88:31:9a:d8:ee:2a:c1:a5:23:3c:85:85:1c:33:be:6f:
         54:72:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:19 2025 by rpki-client