Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa
File:                     33e494e2-5728-3747-829c-9d29019378ca.roa (raw, json)
Hash identifier:          VzdSiHAsiPn1Se/9qKyaMoOL0Hp1aqAOwrejWxZIiLA=
Subject key identifier:   FC:B2:6F:CB:F7:51:46:86:62:7F:AE:3C:81:62:75:D7:10:1F:9A:47
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDCF771DF8F0E7D551BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54725
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:dc:f7:71:df:8f:0e:7d:55:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=81a47fc0-2efd-4066-9e08-62182c08e78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:79:9a:53:06:49:ad:dc:bb:c9:59:b0:77:
                    71:0a:2c:a9:b0:4e:84:de:6b:93:0a:57:7a:b1:3d:
                    6d:ca:88:3b:3e:cd:4d:99:25:47:af:27:74:d3:d8:
                    ad:4f:02:aa:84:69:ee:c5:ea:67:1f:1f:85:07:5f:
                    22:f3:ab:bd:3b:f7:3c:02:e5:ab:ae:e3:6b:20:dc:
                    c6:17:07:db:95:c8:14:5f:ff:d3:53:26:a9:2a:fe:
                    98:31:42:62:77:65:da:f2:b3:48:63:87:a9:52:f2:
                    42:ac:44:d4:be:1f:96:34:22:d5:c1:d4:fd:1c:7b:
                    c3:e7:1d:77:3e:b0:02:1a:38:02:5f:e5:9d:6f:5b:
                    d5:40:78:01:38:97:8f:35:90:88:01:6b:1f:67:bf:
                    8e:33:83:a1:0d:43:1c:50:c5:08:44:39:3c:b1:bd:
                    73:f0:f5:76:1c:96:6d:fd:28:8b:68:c3:79:37:5c:
                    38:70:31:99:d0:23:17:b9:f8:7e:fe:48:52:12:d0:
                    1e:57:47:e3:91:54:75:9f:65:57:2e:96:7f:58:bc:
                    01:01:43:0d:f9:7c:2d:0f:14:e5:2a:eb:bc:15:1a:
                    db:cb:1d:6e:dc:75:cf:56:31:5c:d6:04:08:d2:dc:
                    46:04:43:ed:a5:26:f8:d0:ff:11:09:81:93:51:37:
                    21:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:6F:CB:F7:51:46:86:62:7F:AE:3C:81:62:75:D7:10:1F:9A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e494e2-5728-3747-829c-9d29019378ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:74:f4:1d:6a:ec:5f:79:49:75:4d:23:fe:19:c5:80:2f:b2:
         db:db:fa:37:c1:77:bd:da:97:fe:b0:2b:15:e1:87:e6:80:fd:
         1b:03:60:b0:ba:2c:a7:9b:df:2c:69:07:4b:ae:3f:b0:74:6b:
         4a:f0:61:d0:85:ac:73:22:21:ec:70:3b:31:84:03:4c:13:de:
         b9:ed:74:23:2e:ec:23:df:f8:ff:50:19:0d:5b:d0:19:24:dd:
         a4:16:81:09:53:15:67:71:a7:0b:11:07:93:8a:bd:8a:38:08:
         6c:7b:b2:6a:c4:bb:c7:c6:1b:a5:e7:df:7f:67:66:3b:26:2c:
         39:8a:92:4d:88:88:56:d1:04:09:c0:c1:11:9b:66:0a:36:32:
         25:e8:fb:94:4c:44:97:8b:b7:b7:8b:1e:57:cd:7a:de:67:9c:
         a9:43:22:a0:1d:49:fd:f9:2b:76:9f:95:73:42:39:c4:f7:ea:
         55:f7:ae:24:5e:0c:ce:ab:7b:14:7d:8c:a1:23:79:ec:58:b4:
         a1:e1:cc:8f:25:40:ea:64:d3:df:5d:57:e7:96:12:eb:1a:2a:
         c2:24:6b:60:e6:b6:8a:36:81:2c:18:58:0f:dc:4b:f9:36:82:
         12:5e:fb:0a:46:2b:63:f5:56:40:b0:d5:4e:08:09:93:87:cb:
         9d:d9:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:17 2025 by rpki-client