Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa
File:                     29900e27-cebd-3cf2-9435-565d3b774e22.roa (raw, json)
Hash identifier:          ptoaINiE0axVwPHhXNDFddGN2QEsB0+cypMtPHN2yho=
Subject key identifier:   24:7D:FD:F5:D7:A3:FD:72:BA:D0:39:FE:7A:D2:D3:05:48:AD:2C:B2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BCD6FB6C4818F2DBBCA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     36012
IP address blocks:        2001:470:1a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:cd:6f:b6:c4:81:8f:2d:bb:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=57bbe45f-471b-4217-ac7d-83f6f073749d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:07:ef:e0:62:8e:87:d6:ab:4a:0c:a3:1f:
                    1d:56:a0:54:c3:b7:92:df:b4:9a:a3:82:bb:1e:2c:
                    15:99:cb:6e:1a:3d:af:c2:fa:c5:23:5c:9d:65:4b:
                    78:10:57:96:4c:26:5b:f7:1f:10:e7:38:ea:05:d2:
                    c2:83:1b:f4:81:a1:62:b9:e1:dc:1c:7c:ba:8e:71:
                    d1:e3:57:18:b5:47:33:80:52:e0:a5:50:73:67:9f:
                    84:95:f8:43:c5:36:50:de:fe:08:62:86:a3:67:6e:
                    40:e1:7e:e8:f2:16:2f:d8:22:58:9e:b8:3f:97:d2:
                    34:a7:e6:93:e4:9f:71:71:fa:bd:9c:15:a3:1d:95:
                    54:99:7f:e0:d0:47:35:d3:2b:be:18:11:54:ac:96:
                    60:49:1a:98:0a:f8:33:75:7b:61:76:cc:ca:1a:67:
                    d5:5a:a5:7e:ad:17:68:d9:bb:7c:27:d0:35:cb:f4:
                    97:25:cb:97:ba:95:19:81:8d:b9:a1:8f:41:b9:9f:
                    2b:20:7d:02:18:ee:e2:da:13:f8:14:70:90:d6:8f:
                    2f:e9:c8:f7:ff:cd:0a:c3:a5:8e:e7:09:d5:7b:7b:
                    81:c9:07:20:0b:e7:83:c9:da:1e:c6:83:df:51:6a:
                    76:ea:8f:d8:7f:7f:02:63:c2:99:b1:e2:a0:9f:b6:
                    2f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7D:FD:F5:D7:A3:FD:72:BA:D0:39:FE:7A:D2:D3:05:48:AD:2C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29900e27-cebd-3cf2-9435-565d3b774e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:65:6d:a5:88:34:1e:fc:c4:98:02:1d:02:9c:4b:92:15:
         c3:16:36:26:39:28:6b:c9:02:21:97:76:67:62:7d:3c:8a:aa:
         c9:a4:b6:de:7b:5b:ea:70:d7:52:99:fe:9b:ff:02:11:1a:06:
         a4:ca:36:e7:2f:ce:d1:d0:80:d6:8d:f6:4c:fa:1c:fc:1e:a2:
         2c:82:37:94:39:72:5e:79:49:49:2e:9d:78:db:e7:d2:8f:de:
         7a:5d:18:39:69:2f:66:82:54:73:8d:d3:a5:e5:c2:b5:d0:47:
         1e:9a:b8:ad:ef:b9:6b:42:4c:3b:11:aa:24:47:27:27:33:86:
         d0:e7:4f:6f:66:ab:2c:63:6f:31:83:36:19:cb:15:04:44:74:
         ee:5d:98:55:43:ec:92:a7:d0:d6:17:1e:e2:0b:ba:9d:44:2e:
         6d:26:4f:85:50:a9:23:fb:d7:8e:76:e5:60:62:03:60:ff:41:
         76:a7:4e:91:4d:4b:2d:68:9d:7b:92:c3:0a:28:a7:a5:6e:4d:
         9c:c6:39:a7:ee:59:a0:da:df:97:d3:2a:86:34:e5:af:06:c9:
         37:d6:71:3c:72:67:a1:55:9f:c8:db:94:08:d9:37:7a:9d:e9:
         ad:bb:e3:2f:fe:78:d5:07:75:43:59:15:6a:04:4d:1d:5f:b2:
         ff:10:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:36 2025 by rpki-client