Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
File:                     d6139039-6fc7-37b5-b79d-4f80d949e210.roa (raw, json)
Hash identifier:          kSVnpfoVW6kU+tiiyRXhTVYboqLAfHZoMacSMyhTJH8=
Subject key identifier:   F4:C6:C3:0D:F0:12:8E:AB:4B:C2:E0:C6:92:E1:51:87:F1:54:3D:A3
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584A6825F60715A003D2CE07BF00
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     2381
IP address blocks:        2001:4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f6:07:15:a0:03:d2:ce:07:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=7eaba12d-ad6b-4356-9b41-ef71593b0414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:83:30:0b:6f:9e:c2:72:5c:4d:e4:17:16:a1:
                    d7:e0:98:75:41:17:58:f3:31:0e:00:ac:ac:71:17:
                    49:c3:f4:f9:29:02:d2:09:cb:e9:e4:b1:ca:3b:57:
                    96:e2:df:e9:7a:3e:8c:a0:f8:c2:83:49:2f:a5:ac:
                    55:c6:5e:df:f8:ef:b0:2b:e4:d2:4a:10:69:35:06:
                    85:c2:89:ad:0f:73:29:29:fd:1c:af:48:6a:a2:b0:
                    d0:ff:ad:90:26:3e:c3:b8:17:35:79:38:1a:c7:7a:
                    1c:65:85:d8:a4:83:15:10:ca:52:b7:88:4c:7b:c8:
                    84:1f:4f:57:73:b0:d3:93:56:d6:6a:ef:55:d4:d3:
                    32:d2:7e:ae:cf:f5:34:ed:b8:7a:ea:21:31:05:4f:
                    f0:fd:0c:f7:67:4f:f2:da:98:89:93:2c:66:b8:0c:
                    4b:64:24:5c:95:d6:4d:99:2f:25:55:30:80:3e:f3:
                    20:c5:cc:88:82:df:8b:b4:15:bd:ea:61:33:1f:f5:
                    be:70:c4:29:30:4c:78:be:46:f9:b6:6c:02:bf:5d:
                    31:da:3d:ca:ce:dc:a1:34:e7:84:13:4f:a0:a2:9f:
                    dd:f7:5e:0d:0a:9e:a8:fc:ea:6d:e4:df:33:66:d4:
                    0c:58:c5:1f:2a:b5:64:89:96:8e:7f:88:3e:0c:2f:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:C3:0D:F0:12:8E:AB:4B:C2:E0:C6:92:E1:51:87:F1:54:3D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:98:97:b5:46:9c:87:dd:2f:bf:b6:a4:13:ad:39:dd:a5:27:
         1e:90:44:f0:6c:43:1b:19:87:a7:8e:c1:db:54:a3:64:60:10:
         b1:f8:ee:87:36:fa:a6:a1:a6:a0:72:68:4d:a5:f3:76:ac:b6:
         76:52:77:45:da:15:da:99:20:da:ab:62:f7:0b:b2:f5:36:56:
         33:13:3a:9b:41:f0:33:31:8c:7e:88:31:25:ca:85:87:f1:89:
         84:d7:52:65:6a:31:1e:bf:24:e5:a4:cf:85:02:1b:4f:dc:b6:
         c8:0a:36:37:c4:25:fd:91:55:3d:69:65:78:e0:58:f4:e7:39:
         c7:97:2e:ce:36:10:c1:52:d2:61:10:2f:bb:5b:2e:3d:11:e6:
         cf:ae:78:27:b0:97:a7:8d:8a:0c:29:8f:d7:d9:94:fc:71:54:
         f6:4c:fb:2d:17:6c:09:cd:c5:c5:65:ac:9f:e1:bb:fc:d2:6e:
         62:73:99:56:04:08:37:08:3b:64:7f:ed:9d:d6:28:ca:ab:79:
         40:fa:1e:4c:13:b8:fa:0f:80:35:d3:e7:1a:47:86:06:24:b6:
         22:e3:0e:d1:64:d3:3c:91:b7:62:33:e7:11:bf:21:e2:6f:2a:
         8b:c0:e2:d2:87:e4:5c:a6:14:0f:ae:95:cd:6e:53:87:b4:b9:
         e8:c0:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:28 2025 by rpki-client