Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
File:                     5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa (raw, json)
Hash identifier:          QZPH9b4o12DGDYdR/uW4S1xSK415IT58K7niOyC704A=
Subject key identifier:   6B:7B:A8:C3:B2:F5:E3:22:8E:21:77:48:E5:18:71:34:89:D6:BE:15
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F4328584A9FFBA208DE87B7116647D9E0
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     2552
IP address blocks:        128.252.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a2:08:de:87:b7:11:66:47:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=62a70e56-6f7e-4139-9a98-88c7a532dfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:94:9e:e3:c6:61:6e:aa:3c:9a:65:5f:2d:
                    bf:8a:f4:d0:78:7f:16:5d:98:a4:64:1d:09:b4:43:
                    5e:09:09:3f:49:62:2c:af:7f:e1:00:46:36:ff:b9:
                    02:b3:9f:11:c5:80:73:a5:b0:b1:d4:8c:98:d8:bf:
                    bc:64:a8:1c:5f:1e:f2:c2:ba:07:a8:e0:c9:bd:2e:
                    69:50:f7:31:ba:ef:77:25:ea:e3:c9:91:7a:c5:48:
                    e1:12:67:2a:95:c9:bc:39:bb:f6:e4:5c:eb:9d:ff:
                    70:67:51:09:51:67:6c:eb:06:9c:b3:dc:70:9b:1d:
                    3c:a7:ce:f7:c0:3c:d6:74:b1:31:66:e5:51:cd:63:
                    29:e0:ea:b7:4d:42:e8:c8:e5:fa:f9:58:b9:fa:f4:
                    25:98:b5:40:4e:d9:ca:3a:a8:eb:f6:81:60:a6:30:
                    66:40:96:a7:2a:d1:89:8d:e2:f9:8c:e2:fb:68:c8:
                    b6:92:1b:c3:b4:0d:a9:89:ea:a3:3b:15:a6:c5:e7:
                    78:1e:10:93:a6:42:f7:89:a0:0a:75:bd:ee:f8:e2:
                    4b:71:19:06:91:98:d5:ce:9e:c2:00:6f:46:15:9d:
                    7b:92:de:ba:54:0f:02:15:42:a3:02:ec:f5:e9:8b:
                    e5:4c:b9:2d:29:c3:5d:0a:50:0e:15:d7:48:66:88:
                    96:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7B:A8:C3:B2:F5:E3:22:8E:21:77:48:E5:18:71:34:89:D6:BE:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/5fdb8a7e-e93b-3ece-92ae-1cd3810975bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.252.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:57:0a:10:b0:1a:26:4b:0a:57:35:42:53:fa:13:70:0c:
         34:6b:90:94:3a:7a:a8:10:a0:d4:d1:06:7e:86:06:1b:d5:d4:
         ca:4c:73:7a:f7:c4:97:27:dc:0c:5a:16:bb:13:90:c9:9e:40:
         15:11:37:f5:2e:7f:20:3d:80:c0:d2:f7:0d:82:0a:b0:fa:59:
         6e:18:8d:02:57:04:97:10:df:8f:d6:92:39:c6:a6:fd:ee:4f:
         bc:40:ff:8e:ae:49:3c:4e:47:f1:4a:a4:43:90:8c:a0:a1:80:
         63:5e:3e:14:f1:64:10:c9:3b:ec:30:ff:ba:92:26:e8:b7:7e:
         7a:e2:f0:1a:0a:2c:d9:cc:8e:f7:f0:5c:07:1d:40:37:52:cc:
         85:6d:73:0e:10:85:a7:c2:df:83:52:4a:2b:ff:27:10:cb:2c:
         64:81:c3:1a:ba:45:16:43:12:4b:d4:e8:59:17:23:15:4e:79:
         69:cf:2b:36:c2:36:aa:43:66:06:e4:d0:f9:e1:f2:60:8e:29:
         53:dd:85:52:ff:08:ef:c4:4a:f0:d6:ee:84:77:30:87:15:86:
         3e:0e:18:b6:b2:d9:86:fd:b8:64:a1:38:ee:06:b8:e2:84:ec:
         d8:79:72:0c:19:59:34:93:c3:e0:d2:b9:45:b7:17:31:70:ab:
         40:72:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:14:46 2025 by rpki-client