Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa
File:                     1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa (raw, json)
Hash identifier:          6w1YN7iJ3Vdd2AWu+c+b0XCiahxofJv9H2wyTgVOL6s=
Subject key identifier:   0E:08:E0:5B:8E:54:54:B9:D8:27:2E:B3:BC:FF:24:1F:A5:4B:48:3E
Certificate issuer:       /CN=f357e341-9d26-4129-b5e8-c23c09471ee7
Certificate serial:       010D0C9F4328584A9FFBA36E1FCBEA94D08541C0
Authority key identifier: E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     32244
IP address blocks:        2620:139:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a3:6e:1f:cb:ea:94:d0:85:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f357e341-9d26-4129-b5e8-c23c09471ee7
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=952800b3-c481-434d-b9b9-01ff20cc1db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:ec:5d:15:9c:4b:41:57:0d:61:84:55:2c:
                    68:4a:c7:85:42:d5:a2:c4:ae:98:dd:25:f6:63:9a:
                    65:76:37:1f:1e:fe:65:65:87:aa:a7:0b:8e:d4:47:
                    75:24:b7:b1:1c:92:5e:2f:25:0b:4a:ac:0e:24:7b:
                    7d:de:f4:2f:a6:ae:52:57:16:d8:6a:d0:64:b6:0a:
                    0f:5a:cf:b5:29:99:c0:5f:3e:ad:de:3d:0d:db:f0:
                    d3:13:25:7d:9a:a4:79:ff:45:f3:9b:b7:a1:d4:dd:
                    2a:49:b5:81:97:bc:e2:68:9c:6e:bb:f1:ee:0d:c4:
                    08:d9:7f:f3:61:fd:6b:f6:13:29:0f:98:02:98:ca:
                    ae:c8:06:0b:db:d5:93:dc:91:ae:f0:73:71:34:79:
                    47:4d:93:d7:04:3d:ac:4d:eb:2b:f0:1f:86:39:3e:
                    0f:5c:c2:41:7f:77:cc:b3:79:29:0b:23:b6:c8:d4:
                    70:aa:21:50:57:e1:ab:1d:f6:42:ea:a3:c1:5b:d8:
                    70:28:83:3b:dc:63:ec:95:5f:36:fd:d4:a7:55:61:
                    ec:39:fd:6a:78:e1:99:39:bb:e4:b6:56:a6:88:71:
                    5e:36:68:e3:39:47:f4:c2:8a:4a:04:48:b6:ff:38:
                    bb:52:c9:11:e9:6f:ad:f5:2e:d0:89:09:a2:8b:4f:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:E0:5B:8E:54:54:B9:D8:27:2E:B3:BC:FF:24:1F:A5:4B:48:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/1a2f96a4-cbf3-3b18-89de-89729af16ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7/f357e341-9d26-4129-b5e8-c23c09471ee7.crl

            X509v3 Authority Key Identifier:
                keyid:E8:96:BE:52:65:9E:06:78:DF:65:AD:F8:A7:03:20:A4:4E:FD:7F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f357e341-9d26-4129-b5e8-c23c09471ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:139:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5a:7a:1b:8d:e2:41:84:d9:bb:48:1e:39:af:f0:42:cc:9b:
         2c:2c:42:38:8a:e5:2d:1b:80:0e:c9:da:c9:8a:89:26:3c:2c:
         38:7c:51:ac:ba:05:80:ce:f9:19:fc:cd:57:76:e5:78:ca:68:
         64:f8:ec:bc:c8:c8:d5:70:15:aa:0a:27:41:35:d6:8e:76:35:
         e6:b0:24:13:af:c8:41:f7:91:2c:79:8f:74:10:f9:0c:56:49:
         a8:0e:21:3e:49:48:49:e9:3b:a7:2f:26:ca:5d:38:27:4f:de:
         75:bb:b6:34:f2:eb:9c:42:86:fe:d8:6c:89:63:67:a8:f1:d6:
         3b:7b:83:95:18:04:6b:50:ae:f7:81:90:36:1d:9d:31:68:6a:
         b9:b1:0d:23:e4:10:87:67:87:10:34:26:ca:fd:91:29:6e:3b:
         ab:73:11:22:e3:dc:a8:20:16:81:54:d1:cc:ae:ac:42:c3:72:
         de:6d:6f:d4:6e:58:f5:78:8b:d3:56:02:e3:9b:41:53:ee:f6:
         54:41:3d:b9:cc:e2:4f:62:66:5c:4b:5a:1c:64:90:9a:71:55:
         be:eb:7a:06:05:ff:58:e7:69:0a:25:38:81:99:92:80:88:b8:
         b0:c2:17:51:81:66:05:6c:f7:20:47:1f:9d:c3:48:1c:75:fc:
         02:1f:30:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:30 2025 by rpki-client