Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
File:                     1637f82b-b875-3e51-833e-383542b07770.roa (raw, json)
Hash identifier:          zoD1QCNZBd3b8J0kiQwLWnanZrgArE+UPCnf98J4/Vk=
Subject key identifier:   C2:91:E1:73:A0:2A:7C:C4:09:8D:C1:07:EF:9C:46:0A:B9:21:EB:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF3C3BD5FBA5C3F4FCF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     12183
IP address blocks:        2001:470:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f3:c3:bd:5f:ba:5c:3f:4f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=8bee0912-8c53-4ab7-9b21-8e555ce16306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:1c:e0:ca:ab:37:47:58:72:37:86:b4:ac:
                    de:90:18:47:ae:d7:2e:e7:c8:1b:41:ea:d7:dc:57:
                    92:27:95:6b:0f:fc:73:d0:4e:9b:a9:b9:7e:f6:f9:
                    c5:06:95:20:64:3d:78:72:0c:ff:9c:c6:58:09:c0:
                    9d:6e:1f:8d:15:67:64:a6:e1:9b:2b:9e:dc:3e:96:
                    b7:ad:2e:03:6e:e2:30:9d:c5:de:54:29:6a:87:3b:
                    81:14:33:7d:18:b2:35:2b:c1:1a:ce:a9:56:65:98:
                    52:4f:a5:7f:f3:ec:e2:44:3e:e7:16:82:93:68:0c:
                    bb:c0:19:7f:77:68:15:41:3c:ae:10:a6:7e:fd:3c:
                    df:c7:5a:e4:f8:34:ad:2b:87:a5:a6:7b:c7:2c:13:
                    36:64:43:8b:0e:ea:9d:67:fd:89:91:4b:07:4d:d3:
                    29:ba:69:0f:0a:1d:86:2a:09:ff:28:72:46:28:7e:
                    57:00:a8:5e:9c:4f:9b:6f:43:ba:07:ac:35:b5:8d:
                    49:47:b3:70:5a:32:d9:19:64:a7:e0:87:4e:85:ce:
                    86:8d:69:8c:23:a2:18:e5:99:f1:3f:f5:a4:e2:d1:
                    e5:d6:32:b7:e4:6f:18:48:2e:f6:e8:d1:60:e6:c3:
                    10:a5:56:15:05:87:70:9b:66:98:a8:51:25:02:9b:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:91:E1:73:A0:2A:7C:C4:09:8D:C1:07:EF:9C:46:0A:B9:21:EB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:9f:30:c7:be:50:8e:ff:e2:2b:c2:9f:5c:94:46:76:b7:
         7f:d4:2a:07:03:bf:0c:df:8e:ce:d0:be:33:6d:1b:e5:97:79:
         7d:d5:ed:89:8f:1d:3c:d9:73:4c:ae:0f:c2:5e:b3:4f:63:8a:
         fe:0c:d3:49:a6:e9:6f:c8:83:f2:7a:61:5c:c3:bf:fb:df:2d:
         66:fc:4f:c5:1c:43:be:4b:ea:b6:e6:7e:0a:17:cb:6f:ef:53:
         66:3f:bb:cd:64:bd:ce:90:5e:5f:1c:e0:50:ac:08:d5:75:55:
         1f:d8:81:55:a2:5e:73:75:d7:d8:81:d1:05:d5:06:9a:3c:3f:
         5a:0b:75:ad:41:c7:ce:0d:db:a4:8f:37:60:ce:f6:c5:15:d4:
         2e:ad:41:bb:f9:72:b8:dd:e1:10:d7:44:c4:4c:be:f5:a3:51:
         b1:72:98:63:cd:30:cf:4f:ec:93:8d:19:7e:4b:57:80:a3:5d:
         68:74:f3:d8:3d:05:31:3c:e9:95:b8:e2:3a:64:1e:6b:d0:3e:
         34:37:11:52:c0:dc:48:0e:88:ed:43:70:0f:22:a8:1c:82:9d:
         d0:a4:31:03:92:c9:e9:65:b5:2c:be:70:eb:9f:53:82:af:a1:
         02:b4:2b:18:61:1b:73:f2:40:7b:24:83:80:6e:5d:cf:13:19:
         5c:04:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:01 2025 by rpki-client