Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
File:                     bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa (raw, json)
Hash identifier:          yzCYEjDfH7x3+w4gicCtdz9AFmsb2n9fNi/en/wztVc=
Subject key identifier:   21:7E:10:EC:25:06:0F:51:1F:FA:66:42:F8:CE:55:21:65:D4:C0:AD
Certificate issuer:       /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
Certificate serial:       010D0C9F4328584BAEC7BE0449F0A04CB2167380
Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     21858
IP address blocks:        2607:ffa8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:be:04:49:f0:a0:4c:b2:16:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=66ae8db1-da2f-49ef-80ed-28ee49206ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:0a:20:0a:41:63:ce:1f:7a:49:ba:82:91:
                    d2:89:4a:de:d2:50:94:9e:79:d5:e8:14:eb:7a:33:
                    44:ed:bc:f0:3e:21:26:37:e3:76:71:b1:59:ae:c3:
                    e0:51:fd:97:f1:a7:71:c9:98:f0:df:74:f7:d9:59:
                    ff:02:07:51:de:34:00:96:ea:fc:ad:99:d9:ff:04:
                    e9:fa:0f:f0:4f:f6:1d:c3:ea:ef:85:06:aa:75:e0:
                    28:63:6f:7e:d4:b6:e1:62:c8:e1:94:eb:fb:70:70:
                    fb:2d:5c:52:56:e0:21:6b:0b:12:49:12:18:5e:07:
                    16:aa:a8:8d:d2:84:85:83:66:07:d3:b6:7f:a0:4c:
                    94:fe:77:a8:ed:8e:b8:11:ca:35:a5:21:d7:bf:29:
                    3b:f6:b3:aa:75:03:1d:6e:45:fd:97:6d:62:b0:31:
                    b7:c0:10:1d:68:56:53:39:39:7f:40:26:f3:66:9b:
                    05:59:52:e7:64:18:97:a1:4f:51:74:45:49:ee:d3:
                    14:b7:6d:cb:18:eb:d8:97:01:f6:d3:a5:37:6b:f6:
                    17:2e:17:f2:f2:6f:05:5a:47:81:74:48:8a:5d:76:
                    43:85:85:4a:41:2b:16:b5:31:c5:e9:a0:c2:5a:1d:
                    f1:7c:96:07:db:b0:32:f7:bb:a9:59:cb:ba:06:ee:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7E:10:EC:25:06:0F:51:1F:FA:66:42:F8:CE:55:21:65:D4:C0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/bcc17495-d59c-36cb-ab2f-497dbe63a80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ffa8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:44:a8:19:c0:a2:7f:91:77:70:4a:eb:f9:5f:07:ff:2c:4a:
         41:fa:9b:23:83:1e:64:43:4a:51:87:a7:6c:90:e2:36:dd:89:
         93:6a:9b:eb:dc:f5:98:e2:68:f0:3f:c3:2f:eb:f8:02:51:d0:
         ec:e8:05:28:ca:1d:e8:b1:a0:42:b9:7d:94:a7:9e:e2:ce:50:
         0e:98:57:ec:64:fa:71:d2:17:27:9c:f5:77:48:5a:cb:d3:3c:
         10:08:da:b6:06:34:99:4f:3b:4b:8e:e5:21:58:ab:e8:e8:52:
         d4:05:59:06:53:95:3b:de:8b:f0:4e:be:e3:fe:e1:80:a1:e9:
         e7:c2:6a:bc:72:4e:fc:18:88:4b:41:87:62:68:48:72:40:e9:
         f7:26:16:be:54:22:8b:c1:d2:05:ce:b8:38:e7:6f:ee:b5:8b:
         62:ed:b1:d4:45:0c:bf:06:f1:ad:b2:be:7f:2b:50:04:35:51:
         25:5b:05:34:14:f9:05:fe:82:64:71:ff:5c:b2:0f:d7:4b:0f:
         a6:85:d8:6b:13:13:60:48:7e:2f:29:00:27:66:47:03:5d:3c:
         a7:cf:cf:5a:6d:71:18:7d:fc:fc:97:ef:6c:fe:30:1d:1f:50:
         c2:ab:fc:2f:81:f2:5c:78:6e:fd:81:d8:4f:29:5f:56:f0:21:
         28:22:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:57:03 2025 by rpki-client