Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          o8rqOJPpswvrxzcbbWxvKL6GYdHYE4esxePLWGKGaOU=
Subject key identifier:   0C:E2:1D:DB:D5:94:BA:15:9F:5A:3A:D4:E3:4A:37:F5:DF:11:5E:E4
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584AADF102860E3348EF152FFB40
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:02:86:0e:33:48:ef:15:2f:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=aa31e27e-0aa5-46a8-bf54-652ebd4bacfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:3d:ac:81:df:ef:60:e6:58:6f:3a:3d:30:
                    f5:d3:d0:20:ad:02:fb:bc:38:22:c1:56:73:a4:3c:
                    74:6b:4c:79:3d:a6:b7:67:2e:27:d5:dc:95:80:f3:
                    c0:45:6d:48:16:6f:29:01:f0:a2:9a:3e:44:08:a4:
                    4e:be:4f:92:00:25:b4:b9:4a:13:98:3d:27:43:a2:
                    2a:30:f8:be:80:f1:16:ac:fa:1f:bb:56:da:6a:dd:
                    08:c7:71:e7:41:a0:03:63:14:cd:11:34:60:57:8f:
                    92:cb:5b:34:63:0c:f8:72:ee:4e:2e:a9:a2:76:fb:
                    23:38:a7:80:2c:97:d0:db:09:bd:96:04:c4:b1:60:
                    1d:d2:b1:e8:ce:fe:2c:05:7c:1a:92:68:b6:6c:60:
                    dc:78:e1:ff:2d:ef:63:ef:7e:2e:46:e4:26:d5:2a:
                    ef:5b:a9:13:5d:68:e3:17:bd:a9:05:2b:32:a9:9f:
                    02:1f:ad:f5:27:51:b9:0a:c3:c2:68:52:bc:57:78:
                    3e:b6:86:e0:7d:d9:0e:48:df:3f:c8:25:38:b3:88:
                    3e:ff:5b:70:99:c6:69:14:0b:c7:0c:bf:b0:9c:b9:
                    eb:db:f8:3a:f8:f4:b6:05:42:b1:a0:48:f7:f5:8f:
                    c8:48:ec:7a:79:90:d3:8f:0c:1c:c5:c8:71:9a:72:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E2:1D:DB:D5:94:BA:15:9F:5A:3A:D4:E3:4A:37:F5:DF:11:5E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2f:09:7f:2d:af:e2:a3:47:44:7d:56:c0:ec:f1:01:86:30:
         b0:63:97:f0:d9:0c:a0:18:4d:a6:65:e5:45:bb:30:d8:1f:c5:
         10:8f:b1:56:89:e6:52:65:af:8d:e3:73:49:2a:73:d2:bc:54:
         89:e4:b8:f1:1a:96:52:da:d8:02:17:b0:b3:d0:8c:28:d8:23:
         b0:96:27:43:a9:17:55:33:0b:17:77:b4:28:6e:ee:10:ba:c4:
         06:f5:ea:15:b2:96:38:ed:57:ae:a1:f2:fc:3b:b4:f3:cb:71:
         6b:fe:00:be:70:44:86:a1:3f:af:2b:d0:b6:2c:bb:ca:17:fa:
         3f:3f:ef:32:cf:e0:c1:9b:0f:ae:f7:13:46:c5:f5:2c:9c:f0:
         12:25:62:2a:75:9d:e3:b5:bd:97:cf:56:63:44:65:ca:4e:d8:
         45:54:a4:f1:45:ed:9d:90:61:ad:0d:d3:9c:f3:72:ab:3c:68:
         cc:b5:4d:4b:88:68:bf:2c:29:67:0d:c8:c8:53:1d:d7:b8:18:
         14:27:4c:2d:45:65:75:04:38:bf:91:ba:b9:47:dc:45:8c:33:
         45:7b:fe:86:90:c1:66:3b:85:46:b4:8c:9a:2e:10:17:02:e9:
         1c:93:35:e6:51:ed:a6:62:d4:dd:a0:c6:77:9a:21:02:f9:24:
         80:79:e9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:58 2025 by rpki-client