Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa
File:                     88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa (raw, json)
Hash identifier:          tUZdnSqwRrNinUym4c0vssq6IAOslI0kWuCvzLLRTBQ=
Subject key identifier:   7B:5C:C7:D6:1C:92:33:7A:DF:01:FD:46:CF:DA:6D:6E:13:D4:59:02
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F43285849C0A4ED5DF1FD50BA6EE97480
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        2001:19e8:283::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ed:5d:f1:fd:50:ba:6e:e9:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=68e6eb6e-7760-4258-bbd7-8428a37ac1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:b4:01:27:f0:a6:63:be:3a:87:74:14:c7:
                    ef:18:09:b5:a4:73:2a:7f:68:01:53:6c:29:46:03:
                    10:56:ed:c6:12:80:db:1d:0a:5e:bb:87:1f:d1:d4:
                    99:36:a8:85:5a:3a:18:ef:93:75:5b:c9:32:fb:48:
                    af:0b:76:e3:8e:ba:97:7c:f0:17:cb:40:68:f7:0c:
                    a0:a7:7c:3f:34:54:07:74:76:94:55:82:c6:db:48:
                    97:f8:9b:1c:e9:a6:de:88:8c:6c:91:6a:7e:1a:7a:
                    ae:95:90:98:0e:ec:de:6d:b1:b9:0c:c9:58:70:b7:
                    5c:18:80:fe:df:4e:75:b7:55:e8:ce:78:f3:fb:d3:
                    f4:b1:3b:55:81:8b:a7:40:42:c4:fe:2a:8d:8c:2f:
                    f5:be:5e:57:ff:52:a5:33:9f:51:10:56:17:b9:d1:
                    54:dd:0b:00:7f:58:db:83:7b:2c:95:cd:f9:49:6d:
                    6a:8e:55:9d:b5:b1:9a:d2:df:ce:6d:e5:7b:fc:15:
                    55:b9:a2:e7:a6:98:ea:f4:01:1f:ca:3d:ec:c6:ff:
                    52:5d:8a:c5:39:42:7d:72:29:48:9e:d8:60:24:88:
                    76:58:65:35:e1:56:3a:9b:23:5e:99:21:84:9a:62:
                    f4:b9:2f:2a:a1:6b:fd:40:ef:e9:03:e7:06:11:e4:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:C7:D6:1C:92:33:7A:DF:01:FD:46:CF:DA:6D:6E:13:D4:59:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/88c5782a-cd5f-3e3d-9cd0-4164da80a227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:283::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:75:05:22:af:97:a6:c5:76:b6:b5:99:47:de:17:c9:5b:5c:
         b0:df:d5:59:25:a5:67:48:c5:66:0d:a1:ed:ad:3f:c4:ba:f8:
         5c:7e:cb:da:d5:96:09:bc:58:fd:1d:56:f8:0b:0a:2f:f8:4f:
         a7:f9:bd:62:b7:41:5d:15:b6:75:91:29:d9:8e:e6:1f:d3:cf:
         60:80:61:18:9a:88:99:aa:15:81:35:f3:e2:94:c4:8e:90:b1:
         eb:6a:95:98:bc:3c:59:1a:28:aa:7d:38:d7:66:64:a9:e2:57:
         5a:51:6e:09:cd:29:4a:09:0e:07:25:94:76:0c:55:fd:b7:aa:
         fe:34:16:13:e8:9c:df:92:aa:f5:75:a0:f8:66:75:68:93:2b:
         f0:e8:b0:14:88:85:fa:fc:b3:3e:7a:45:d1:0a:b9:1d:e3:8a:
         de:ac:a4:ed:42:5a:40:f0:ee:60:5b:00:51:1c:3f:34:96:d7:
         12:be:cb:2d:31:87:cc:15:23:a9:e9:38:7b:02:45:25:ea:19:
         70:93:a7:1e:3b:d4:e3:c6:5f:3a:a8:e6:e9:7e:8c:07:50:2e:
         75:25:24:9f:bc:e6:5e:45:94:24:58:dc:44:73:b6:ec:03:5e:
         93:9e:df:60:a1:cf:68:3e:86:e5:5b:d2:56:a1:35:48:ee:70:
         1f:bc:4a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:21 2025 by rpki-client