Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa
File:                     2e98d150-755b-3cbf-959f-6f8293cfd209.roa (raw, json)
Hash identifier:          Ob45kg4EQAYckzFZuJarlci0Q022yX77VXa4XVjadKk=
Subject key identifier:   B2:6B:27:33:7B:68:79:40:16:2E:BF:D9:23:8F:20:67:03:AD:B9:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFD6055F9EDA065DCEB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     400919
IP address blocks:        2001:470:27f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fd:60:55:f9:ed:a0:65:dc:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=5e58bc4f-a973-4c20-ac83-63d880accd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:47:d0:d1:1e:11:26:5a:86:9c:98:ed:72:
                    db:c0:b4:e7:92:0b:c4:e6:9e:e2:78:ab:37:e8:64:
                    0d:82:13:01:01:e7:d0:90:be:0d:62:49:e4:a5:73:
                    3f:3a:fe:37:fa:ae:e7:58:4a:b4:ce:29:e4:6b:e9:
                    d5:d8:6e:8b:5d:db:ec:fe:17:3f:4b:53:c4:8a:3e:
                    23:13:96:08:d4:63:d0:7b:a4:49:9a:89:a9:c4:cd:
                    9f:36:8e:be:fa:4c:36:17:81:c4:f8:1d:2f:99:5c:
                    a9:a0:02:c7:2c:33:1a:74:aa:8d:0d:4d:d9:12:89:
                    28:71:79:21:aa:e6:07:c2:90:ef:c1:38:d9:99:ee:
                    ad:e3:18:8a:70:d9:fd:f6:31:fa:55:82:c6:3c:a8:
                    61:6b:27:3a:f0:03:76:39:2a:a3:ef:1d:7e:fb:95:
                    52:87:bf:58:81:47:28:4e:b4:a2:98:1d:de:92:75:
                    1f:39:d5:00:30:f9:69:bc:9c:5f:84:e6:8e:e1:99:
                    31:4e:61:0f:96:fd:99:68:d4:ec:ad:90:10:1d:b1:
                    8a:dc:ac:d7:d0:b4:0b:f3:a1:3f:b0:8a:e0:11:ec:
                    ca:84:fd:8e:f0:12:d9:ce:84:e1:e6:4c:23:51:81:
                    63:6e:8b:b3:46:5d:0e:60:f7:26:4c:22:e4:c2:57:
                    32:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:27:33:7B:68:79:40:16:2E:BF:D9:23:8F:20:67:03:AD:B9:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:1f:e5:9c:7f:53:5c:06:5b:e3:f6:8c:a4:a3:75:f3:ec:
         3c:ed:39:0c:20:0d:1c:e8:b9:9d:ea:64:44:54:85:b7:1d:0a:
         e5:67:9c:15:ef:bc:44:7a:7b:6e:3b:00:52:99:0c:7c:d3:54:
         3e:63:82:b9:1d:fe:5c:a6:c3:3d:75:b6:26:e8:b8:f9:db:e9:
         f6:52:30:58:7d:4a:42:85:91:8d:42:e8:2d:dd:d7:a9:b4:c8:
         99:d2:f8:59:85:ad:4b:25:8c:c9:40:b3:48:ff:6c:98:00:ff:
         fd:79:61:ac:c0:e3:24:a9:fb:53:cf:c4:68:61:ac:ce:e8:fd:
         74:8e:5e:68:e9:c3:58:e2:99:72:f3:be:9f:43:40:93:39:1e:
         09:5e:ad:42:7a:03:94:51:64:0d:df:8d:6a:10:31:73:c8:f2:
         af:e8:4b:71:d9:cf:0b:b3:c9:d5:ef:61:64:e3:7a:89:80:31:
         2a:ff:12:c1:00:ab:cd:81:40:f0:d0:0e:64:ce:35:ff:4e:da:
         a9:27:a1:a1:2e:1c:f1:ae:3b:ea:6b:aa:d9:ca:a1:c1:8f:bf:
         9b:5e:6d:bf:9e:62:16:9d:cd:17:9d:ff:89:4d:56:75:47:ea:
         cf:ce:4b:cf:2d:c9:79:0a:c8:48:c7:93:db:19:fe:fa:53:2d:
         4b:8e:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:14 2025 by rpki-client