Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa
File:                     5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json)
Hash identifier:          bgMVYt57v+VwLhGzCjD72NESbm25LpFIwvqpKQ2rEFc=
Subject key identifier:   F1:DB:7D:33:62:98:79:06:BB:15:1F:73:8E:49:98:2A:55:B1:6D:1E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0C8B62CC223EA1E40F4A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        64.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c8:b6:2c:c2:23:ea:1e:40:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=ca60b027-3403-4ecb-b072-54987e8a21cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:37:c0:8d:87:ce:ce:62:91:be:6b:fc:21:
                    02:e9:9c:f1:57:c7:be:5a:22:aa:9d:18:aa:f3:f0:
                    e7:c7:31:72:b0:26:d1:44:a1:d9:53:6c:f4:ef:76:
                    89:46:48:1b:3e:fc:1f:57:4f:00:5a:66:99:ea:c0:
                    f5:a5:11:0d:5d:58:cc:4c:a3:26:2c:39:2b:43:27:
                    ee:aa:c2:f0:11:92:23:a6:d4:bd:e7:84:24:96:18:
                    36:f3:50:78:65:de:cc:cd:11:bf:66:10:36:17:97:
                    da:3f:fb:61:c2:9f:22:af:12:34:f4:a6:ab:36:bd:
                    f6:a0:80:fa:a2:68:b7:db:ee:58:1c:61:83:4d:cd:
                    61:d4:e6:11:83:07:b7:0d:b0:9a:be:01:54:e7:1e:
                    a3:e7:9f:5a:ef:8d:4e:93:34:b7:40:41:f2:cd:52:
                    ca:56:8c:55:28:a4:92:6b:49:fb:ab:7a:bd:69:1f:
                    ec:65:6b:f2:19:d7:58:2c:ef:94:06:d5:45:1c:07:
                    2f:cd:4a:6b:39:b8:06:0d:3d:13:0a:88:cc:5a:9f:
                    23:35:e5:56:e7:59:be:1b:df:10:f0:33:a6:ef:b7:
                    c2:1d:92:87:85:2e:9b:d1:14:e8:8f:62:d3:93:c3:
                    11:69:f0:73:fc:38:ad:c9:a3:76:8e:e3:08:90:67:
                    5c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:7D:33:62:98:79:06:BB:15:1F:73:8E:49:98:2A:55:B1:6D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ce:d3:21:57:16:b9:d7:47:d1:ea:c6:e3:50:ec:bf:ca:09:
         02:0f:4c:1c:af:27:55:6a:82:c4:0e:17:7a:b1:b0:23:6b:5a:
         6a:f0:64:e3:97:8b:f9:c2:db:39:ac:6c:ce:7a:b5:ae:0f:01:
         28:33:27:59:8f:07:06:89:de:67:85:96:bd:36:58:8b:45:30:
         e2:ca:d7:9b:a7:df:c4:b6:81:fc:be:5d:ce:26:e7:56:4a:7d:
         ee:66:4f:a7:57:f4:05:94:d7:40:c6:75:5b:a3:67:81:e6:05:
         9a:a4:0d:5f:33:77:78:bb:1a:29:c4:51:bf:bd:16:ac:78:9f:
         a2:2e:42:60:c5:3e:a5:d1:15:a5:35:a7:6e:c8:11:3e:7e:cc:
         0b:25:88:27:81:92:f9:a9:2f:34:84:02:1d:13:b0:42:18:26:
         6a:57:fd:23:1d:60:24:0a:48:ad:dd:ae:69:cc:44:34:44:10:
         61:6e:45:06:f7:7a:bd:fc:bd:e0:3e:e0:c3:4b:2a:31:55:fa:
         39:94:bc:37:f4:ae:c2:a8:66:ca:b9:d7:09:da:c3:9c:be:b2:
         f8:d9:49:48:d1:ae:65:97:d6:71:57:84:9c:0d:c0:ea:3d:82:
         ea:d0:45:63:fc:70:96:bf:89:4a:bf:71:4a:e3:59:48:8e:3a:
         c5:9d:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:57:46 2025 by rpki-client