Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa
File:                     5c3530db-46df-356d-aa2a-fda2b639d4c9.roa (raw, json)
Hash identifier:          625rTRS5ZO7p6ivp/2D2ZMf5xUtk92Du7VljzIYcUxc=
Subject key identifier:   FA:EC:EF:11:AB:D9:CA:25:D2:AA:5C:2E:2D:A1:E6:FC:1A:1B:2B:C2
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584A9FFB9C11C5E8DACD6A1B5F80
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     715
IP address blocks:        2001:500:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9c:11:c5:e8:da:cd:6a:1b:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=2bfefcd2-f458-4f3f-aa59-2336f8ff7c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:1c:6e:70:62:38:af:35:ae:da:7f:81:80:
                    83:ea:a9:09:58:df:c9:28:a9:88:0d:a7:da:96:a3:
                    9e:5b:27:27:ba:56:23:68:57:dc:69:95:48:7e:e2:
                    a4:81:3c:0d:f1:6c:1b:12:bd:ac:2f:26:72:6d:29:
                    2e:49:87:f3:58:52:82:6d:9a:e0:73:f6:04:a3:dd:
                    f2:9c:df:09:e3:d7:fb:6f:b5:61:9f:24:3f:21:02:
                    9a:b6:88:99:64:4a:9c:c5:0f:47:6a:3b:1f:c2:f1:
                    00:ee:ef:79:b4:9b:5f:a2:f5:f5:77:28:56:b2:a1:
                    ed:d8:02:a7:cc:21:61:f5:d8:78:1f:4f:11:3d:92:
                    76:e9:91:c9:14:7d:92:3f:3f:ec:1d:8f:3d:92:4d:
                    69:57:88:0a:a2:0f:26:93:31:81:16:9a:d4:cd:a7:
                    df:16:18:b5:c8:5e:3a:3e:03:6b:36:18:14:3d:d9:
                    e6:85:62:60:97:a9:56:7e:65:fd:e9:d7:da:87:5a:
                    c8:cb:1c:4a:ac:71:89:03:71:91:5b:8a:ec:0a:f0:
                    14:c5:a1:9b:68:3a:51:ea:03:63:d7:21:cb:74:80:
                    cf:65:04:2d:e3:7b:e5:46:78:15:0c:41:24:9a:e6:
                    58:ca:74:dc:a4:ba:10:be:30:32:cc:88:e1:e9:64:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:EF:11:AB:D9:CA:25:D2:AA:5C:2E:2D:A1:E6:FC:1A:1B:2B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5c3530db-46df-356d-aa2a-fda2b639d4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:15::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:64:e9:e6:58:e7:aa:c3:66:5c:45:ed:8a:c3:d4:3e:fb:
         84:08:8d:66:8c:bb:11:7e:8e:aa:ed:83:5a:e9:70:b6:6c:da:
         b4:35:1e:3d:84:44:1d:0f:75:ce:c1:9c:d6:62:bb:c5:ef:64:
         c8:1a:5a:ca:2c:df:90:aa:60:d2:ea:60:11:a8:8a:8b:2b:b0:
         e7:3f:df:a3:64:35:24:c4:30:06:0f:4a:52:72:32:cb:cf:4d:
         2c:35:b8:b4:13:38:63:5d:9a:20:57:bf:3d:e4:f4:b1:f8:19:
         20:b2:f4:9c:c1:f7:3b:10:f8:f0:d8:9c:84:d8:74:13:5b:58:
         73:47:e9:18:7a:9b:b0:83:2d:94:b5:6e:8f:ac:6b:b9:38:5c:
         84:02:96:63:0e:ed:6b:a9:da:1b:49:c8:41:0f:63:28:fe:00:
         98:5c:7e:bb:50:f1:c6:24:83:71:87:be:11:41:2b:10:92:06:
         50:8d:d4:80:12:d5:b4:0c:86:dd:4a:9e:0d:e7:ff:b9:c5:17:
         1a:1c:46:70:7b:1b:a3:bd:de:a0:44:7a:33:52:16:e7:08:a1:
         ae:5e:74:8f:69:64:68:06:7a:0e:84:3d:e3:d9:87:2a:f5:8b:
         2d:a5:de:66:9b:85:e6:00:50:4d:6a:4b:29:89:89:77:51:51:
         a6:9b:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:35:08 2025 by rpki-client