Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa
File:                     4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa (raw, json)
Hash identifier:          QMnfr27jziKxlS9rxEwC3hFs7ox0Pujd4gsQbsLo4Do=
Subject key identifier:   05:FF:96:D2:EF:E8:31:CE:D7:4C:65:51:F2:E3:57:4D:B5:B3:09:EC
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584A1B600A809C207F266CECC600
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     3209
IP address blocks:        47.64.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0a:80:9c:20:7f:26:6c:ec:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=36be2888-27b0-431f-8520-27449f825df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:a9:e3:e9:48:d1:5a:2b:23:8b:f4:0c:f5:
                    cc:ae:70:3d:ae:13:0e:e9:73:ed:88:d8:c2:14:38:
                    78:1f:7c:fc:ae:7f:76:14:40:97:9c:7a:2b:d7:06:
                    48:09:aa:f9:77:51:3f:4b:92:5b:a3:3a:79:27:44:
                    f6:0b:38:fd:f9:21:c3:a6:47:e6:95:63:7c:c3:d3:
                    c7:e2:50:51:e0:7c:07:10:fa:78:e6:cf:a4:38:4e:
                    51:65:56:0c:66:57:93:b4:31:6e:b0:f1:9b:d0:ee:
                    a3:67:82:55:04:52:d9:3b:c2:66:03:b4:01:3f:33:
                    d9:1e:07:23:0c:9f:68:2a:3f:26:73:cf:e5:c5:2a:
                    4b:33:d2:c8:65:1b:9c:4b:6b:15:b4:ee:ed:f5:71:
                    5c:35:0b:24:9c:1c:89:08:9f:cb:9a:00:45:64:d5:
                    90:3a:f1:df:b7:a5:9b:90:04:e5:71:b5:52:f6:57:
                    6d:9d:90:5a:04:11:94:d4:50:a2:ec:4e:d0:08:ea:
                    5c:45:e5:60:80:dc:80:78:05:14:19:61:07:5b:c3:
                    a6:6b:e8:5a:55:b2:62:06:d1:66:f5:87:53:28:88:
                    4a:fc:18:2c:49:bc:87:01:bd:71:d4:64:fc:b3:b0:
                    eb:bb:62:c4:48:59:45:99:4d:dd:d7:4e:f7:c0:57:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FF:96:D2:EF:E8:31:CE:D7:4C:65:51:F2:E3:57:4D:B5:B3:09:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4b8ba250-55b9-332d-99e0-6e7bb0bb47b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.64.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:f4:5c:db:2d:91:b6:80:da:fd:99:dd:8a:35:2b:79:19:ab:
         87:c0:43:8f:76:9f:77:f6:ad:52:68:da:cb:a7:87:ce:02:4c:
         29:57:b8:bd:fa:82:81:47:67:b8:d7:22:05:d0:9d:da:d4:f7:
         64:77:d8:43:00:e3:bc:f0:9e:e7:76:7a:f4:0d:fa:e1:0e:ea:
         2c:b2:01:76:ea:fd:c1:02:01:ca:6f:b7:80:0e:c4:3b:0e:50:
         8d:bf:23:1e:f8:67:64:7f:f0:07:ea:fc:83:74:fa:1a:f6:dc:
         de:1c:4a:ea:2a:da:c9:9f:2d:24:4e:ea:ff:88:65:8b:3f:02:
         76:f3:97:f7:10:98:20:a9:8d:83:3f:fb:17:63:45:aa:bb:12:
         07:38:6d:2a:c6:1d:6a:ed:e6:70:ba:3a:11:89:67:67:0c:af:
         47:05:cb:01:f7:8c:85:72:04:f2:da:5f:d1:00:1a:8f:eb:19:
         5c:f4:90:fd:9b:37:ca:22:5b:a3:6f:6d:5b:7d:8e:8e:ad:9e:
         3d:a6:14:fb:d2:54:6c:70:c9:c5:22:d8:3b:2d:ff:35:8a:e4:
         0c:52:77:1b:e7:fb:d3:54:84:4e:ff:91:4a:08:23:a1:a6:24:
         49:cb:bb:14:16:26:ff:46:d8:d6:ef:cc:d7:14:bd:2f:1c:9c:
         12:27:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:48:45 2025 by rpki-client