Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
File:                     5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa (raw, json)
Hash identifier:          jYzMtD9XzUDhJbmaJgBtGv2BfQ4m78q3jWGMSdBdl1g=
Subject key identifier:   5C:41:4F:FF:EA:06:A3:3B:D6:DE:62:56:47:FE:2F:DB:FA:78:B1:80
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ABBE632508CAE68207DD928A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     17025
IP address blocks:        2001:438:2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:32:50:8c:ae:68:20:7d:d9:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=1076465b-7fd5-42bd-b035-bec47100eadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:25:16:f0:58:e5:e3:cd:7f:99:4f:b4:af:
                    74:75:2e:c2:5a:e7:3d:83:ea:8c:3e:3f:c8:7d:50:
                    78:fe:9e:8b:3b:78:24:d5:b2:db:45:a7:78:7d:c1:
                    8c:02:38:a2:09:ac:3d:27:dd:25:6c:0d:9a:82:39:
                    09:fc:69:1c:54:30:69:e4:9f:2e:49:f1:c7:67:61:
                    d8:7b:1d:08:0f:91:43:c7:f5:0b:b6:05:7f:e1:2b:
                    35:bf:55:09:69:51:d8:69:17:c1:89:d7:00:46:73:
                    de:13:c7:af:9d:55:f3:c0:52:20:24:0b:31:eb:68:
                    77:de:dd:de:0b:57:aa:02:06:a1:0e:b7:bd:5a:25:
                    c4:da:0f:0d:09:28:c2:5e:b4:f0:c4:fa:3b:de:3c:
                    81:c5:64:c8:b4:cb:5a:93:14:18:b4:64:c5:ea:66:
                    3a:6d:24:e4:ed:2f:2d:43:44:02:8a:4d:ca:51:7c:
                    87:88:19:74:50:07:8c:60:97:b2:67:85:51:35:c3:
                    f4:4e:d4:86:f2:db:f8:15:50:a5:c2:51:4b:fb:ce:
                    90:95:69:36:95:c8:c8:34:66:ea:db:4d:f2:fb:62:
                    5a:cf:d8:d3:fd:e1:33:55:d7:d2:4d:ef:af:82:3f:
                    77:1d:39:5c:c9:d8:cb:71:e1:8b:cb:67:4d:f4:7e:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:41:4F:FF:EA:06:A3:3B:D6:DE:62:56:47:FE:2F:DB:FA:78:B1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5ffbdabc-da3d-38d4-859d-05dba1eef1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:2f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ad:2c:4c:53:29:bc:07:48:1e:e5:01:86:ca:4c:1a:e3:66:
         7c:8b:50:d8:4d:55:d9:72:6b:1a:97:ac:c8:31:03:13:f4:fe:
         37:c5:06:87:cc:40:4b:aa:5e:1b:30:e3:03:4b:46:a4:d2:38:
         37:c6:ba:c3:e0:18:dc:b8:34:f5:d9:f7:fc:a0:a8:01:41:04:
         8a:74:b4:9d:7c:7c:dd:17:20:0e:4b:a8:12:a5:47:80:9f:bc:
         5e:19:f7:32:3a:4a:77:ac:ff:f9:b5:31:c5:9d:82:d7:50:c8:
         e2:1b:f0:59:f3:66:fa:ef:fd:95:cd:9c:0b:e6:14:5f:06:78:
         f7:48:d9:58:77:1e:7e:b0:2f:99:b1:9f:47:3e:db:06:ef:30:
         5a:21:60:a7:b3:e4:e8:89:68:05:90:84:87:3d:bc:dc:e1:ac:
         32:b6:50:32:48:9b:fd:9f:e2:82:c3:1f:4f:6f:f3:bb:b4:98:
         64:8b:f3:23:7c:21:82:80:92:67:9c:a2:bb:84:0c:9c:67:cd:
         75:e7:2b:06:bd:74:e5:38:f0:84:a5:9b:1c:ba:e6:b3:12:74:
         9b:1c:a7:7d:d0:38:4d:4a:f4:2d:37:93:22:bf:31:ab:b0:50:
         42:da:7d:a3:aa:bd:98:a8:fc:18:31:8e:da:a1:a6:9d:ba:9b:
         35:ec:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:05 2025 by rpki-client