Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
File:                     13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa (raw, json)
Hash identifier:          sOaqrI+0r+vyymlGumamuc21jZbYX9JPWLNCO25nFz8=
Subject key identifier:   88:12:4F:8F:6C:6C:DC:46:36:4B:7E:D2:B9:A6:11:DF:8E:A8:44:00
Certificate issuer:       /CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
Certificate serial:       010D0C9F4328584BB727B7AC484F8D0704D2AF80
Authority key identifier: 54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
Signing time:             Sat 01 Nov 2025 13:00:37 +0000
ROA not before:           Sat 01 Nov 2025 13:00:37 +0000
ROA not after:            Fri 30 Jan 2026 14:00:37 +0000
asID:                     397301
IP address blocks:        2607:7580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:27:b7:ac:48:4f:8d:07:04:d2:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
        Validity
            Not Before: Nov  1 13:00:37 2025 GMT
            Not After : Jan 30 14:00:37 2026 GMT
        Subject: CN=314ba27b-c05f-4acd-804c-53ef584c6e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b2:bb:35:33:86:7f:f1:6c:8b:3c:fc:20:a5:
                    1d:df:ef:c9:53:fc:3b:70:61:c6:e9:9c:11:1a:d8:
                    cb:a0:70:94:15:71:31:e1:83:0d:6c:c3:23:40:b0:
                    7a:ec:ef:60:5a:b4:f0:6f:c7:e8:5c:b2:f1:42:e1:
                    9e:f4:af:4d:fc:e7:20:47:cc:63:37:d3:54:32:b6:
                    8d:90:f3:56:11:b3:24:cf:e6:65:ea:c7:7b:41:07:
                    38:f1:0d:56:34:7c:ec:87:1a:80:9d:75:a7:49:c9:
                    bc:12:b8:65:eb:58:df:16:d5:8e:9d:01:1e:3d:ed:
                    ba:dd:17:d6:c1:27:1d:21:9f:7b:9c:1d:88:ba:68:
                    c6:cc:7f:c6:84:02:03:15:68:75:0a:12:63:b7:16:
                    99:0f:46:f9:fc:53:8a:49:67:ab:de:03:da:d5:d6:
                    ed:7c:2f:41:44:2e:0f:bb:2a:29:7e:96:44:3c:17:
                    56:3e:ae:21:97:31:a3:c5:ab:d8:3e:e4:1f:03:0c:
                    2c:ca:f5:fb:9c:cf:14:bd:9b:66:ed:46:73:02:11:
                    e1:12:34:43:d6:09:56:13:78:93:52:ad:62:ee:3e:
                    87:d2:b7:3c:42:4f:6b:8a:c5:7d:b6:19:47:08:9b:
                    ee:7b:66:0b:c0:2f:4b:9d:f6:a5:42:30:20:f8:67:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:4F:8F:6C:6C:DC:46:36:4B:7E:D2:B9:A6:11:DF:8E:A8:44:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl

            X509v3 Authority Key Identifier:
                keyid:54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:46:42:a7:ea:27:ac:30:29:9b:85:ee:85:5d:a2:da:1b:eb:
         39:8c:e3:7e:ad:67:f3:db:ae:a7:88:34:45:4e:6f:e6:b3:b2:
         a3:84:96:51:33:8d:af:e1:1a:ef:dd:bd:17:40:9a:0d:25:7b:
         3d:c7:39:18:af:2d:d7:96:6c:fa:07:3b:dd:ae:86:1f:cd:91:
         b2:54:4a:ee:97:dd:d5:10:33:91:50:69:d3:f4:21:f7:ba:61:
         18:3e:be:f8:32:b6:14:18:37:cc:39:1f:80:fd:6a:89:6b:82:
         bb:c9:cc:62:5c:8d:41:6d:34:06:cd:d6:51:7e:8a:eb:72:3b:
         a6:e6:0e:b4:95:35:82:89:d4:45:8d:d5:05:34:f3:f7:fc:43:
         e8:33:07:52:23:fa:89:ac:40:49:09:a0:5a:98:2d:63:63:af:
         02:42:c8:fa:25:9b:32:91:be:d3:f6:9b:24:cf:54:ac:8e:59:
         40:bb:e2:d4:be:ff:70:c8:d7:60:a9:65:ec:e7:0c:f0:0c:8a:
         1a:81:67:27:22:88:35:2a:f8:28:76:66:bd:ba:9c:a4:ee:39:
         f0:38:bc:c4:fb:da:9b:6c:60:e3:ee:9a:27:be:0f:0e:ad:c3:
         ba:ab:1f:4f:a0:5b:5a:b1:3c:d9:fc:9b:1a:34:c3:8c:7c:19:
         d8:56:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:38:11 2025 by rpki-client