Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa
File:                     b02811c2-ab72-3845-927e-12fb04c97d6f.roa (raw, json)
Hash identifier:          u9d7WP10i1ijdhLtHObpxqJQK0FwK+i66O2viBfzn8Y=
Subject key identifier:   21:74:05:23:39:82:89:F7:2B:3E:3F:EC:04:80:07:86:F8:72:7F:D0
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584AAB2651769011F620BA005500
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     7782
IP address blocks:        2001:4948::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:51:76:90:11:f6:20:ba:00:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=0afe1e60-a9cd-4418-aef0-48e92ece5831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:8c:4e:b6:4d:e3:28:bf:98:f7:ff:3e:75:
                    59:5f:de:dc:9b:fe:d6:a8:b4:b7:07:a3:91:0b:79:
                    51:3c:ff:a4:02:8f:f0:a8:33:ef:d4:14:ff:b0:11:
                    64:a0:bd:21:34:1a:72:10:68:6a:eb:00:f2:a6:a6:
                    dd:fe:0e:31:f0:83:a8:89:d1:0f:6d:52:8c:5e:5a:
                    89:62:19:1c:2d:b9:9c:bc:74:74:0b:05:3f:cd:01:
                    5a:b9:dc:33:5d:5d:c9:d8:63:c7:6a:5b:9d:1d:84:
                    53:e5:9e:32:21:c3:f4:1f:8e:bd:bf:a7:60:17:25:
                    7d:bc:01:be:74:aa:2c:f8:f0:29:40:b9:07:23:1e:
                    e9:fe:84:f0:64:ae:21:46:f1:9d:db:ac:3c:0d:b0:
                    6c:d0:a0:fd:bb:81:00:f6:b9:5a:61:1a:27:b6:43:
                    06:92:04:83:3d:76:28:1a:49:f7:0f:56:5a:42:ef:
                    c2:7e:41:39:88:31:13:88:4f:5c:07:c9:15:7e:f9:
                    55:fa:6b:5e:c0:6f:f8:75:1b:25:43:44:da:52:3b:
                    84:19:5c:3e:bc:99:b6:24:64:e5:06:b0:3d:1e:6d:
                    e5:64:bb:da:53:a8:3e:b9:50:ab:05:2b:62:85:48:
                    21:14:78:f4:02:22:1b:65:1a:c8:2f:fe:cf:67:77:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:74:05:23:39:82:89:F7:2B:3E:3F:EC:04:80:07:86:F8:72:7F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/b02811c2-ab72-3845-927e-12fb04c97d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4948::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:37:fd:c3:1f:84:ca:51:18:1f:d3:e9:46:38:22:65:7c:
         37:84:77:0b:c6:a6:46:34:6b:3e:05:07:0e:68:32:8a:6e:49:
         61:cc:9c:49:f9:c2:cf:06:b4:41:7f:ef:ee:db:53:fd:04:fe:
         40:c1:9c:51:7a:b2:47:10:f9:ef:54:ba:1e:2c:d9:01:33:94:
         1a:9e:a6:c6:1e:3d:f5:5a:f4:3d:5f:1c:77:76:a5:f8:32:d7:
         1c:39:9b:68:a2:ce:dd:62:8d:04:25:55:6e:03:5e:1b:0e:ec:
         12:ff:23:b5:e0:7f:66:93:47:33:1f:9e:50:34:cc:30:c8:27:
         f1:c1:c4:de:fb:2c:4e:7d:fe:94:52:70:13:c1:90:35:78:8c:
         4a:3b:49:9c:c7:90:21:8a:5d:ed:b2:fb:fc:48:86:8e:91:19:
         ec:2d:6f:6f:bd:26:46:d7:7f:e6:0a:3e:3c:9d:b0:2a:86:94:
         9d:d0:15:69:09:ba:80:17:34:2a:76:56:f9:c5:f8:cb:fd:9b:
         37:d4:a4:60:9b:71:76:e2:25:da:92:3a:36:09:5d:ae:3c:bf:
         47:d7:d0:38:0c:6d:1a:ee:3d:4e:52:e3:cc:6b:70:f0:51:ea:
         d5:3d:fb:50:91:68:a2:9b:23:a8:b2:7f:5c:3f:ac:2f:ab:8f:
         76:9d:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:20 2025 by rpki-client