Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa
File:                     7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa (raw, json)
Hash identifier:          YTQP+PnQuEXD3O3wQfuS73s47/3kg/C5Buq+GKLih/E=
Subject key identifier:   0A:90:A2:A5:64:96:78:95:5A:A3:B0:66:FF:49:BA:9D:AB:13:5C:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDB33EA9FEB81E4573980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     9927
IP address blocks:        2001:470:291::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:db:33:ea:9f:eb:81:e4:57:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e2b20dbf-eac4-4185-9143-29b6aad6bf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:57:39:74:35:0b:2b:2e:03:eb:c3:b4:e2:
                    af:4a:06:f8:3b:8f:ba:7f:0e:1b:4c:ec:64:c7:b4:
                    d3:38:db:5f:47:7e:5b:9e:8a:34:ed:24:88:8f:85:
                    2b:ae:aa:6b:7b:8f:8b:c3:19:78:52:6c:20:cd:b0:
                    ef:37:95:31:b6:b6:8d:12:55:e1:6e:30:a6:31:f7:
                    5a:68:4c:7e:29:90:aa:88:a5:dc:1b:e9:55:bc:7c:
                    0c:0d:4d:76:ce:86:da:3e:cf:9b:06:1a:90:5c:ff:
                    4a:e7:3d:b6:5d:75:5c:3a:58:72:4b:ec:ac:a1:64:
                    9d:86:54:82:f5:7b:7b:10:af:49:1e:2b:60:ce:26:
                    77:cb:a7:25:53:2b:10:f7:bd:cb:f6:ce:1e:4c:2e:
                    99:0d:85:45:40:20:86:05:e7:fe:58:ab:70:68:21:
                    d5:f5:7a:41:ff:13:db:c7:4a:41:40:11:81:8a:64:
                    a9:fb:d8:c9:62:ef:27:e8:a0:0c:86:12:da:5b:8f:
                    5a:e6:54:22:c2:35:24:b6:ae:53:3c:40:35:9e:be:
                    ab:bf:c4:ed:81:a2:1e:02:a5:56:86:9d:2c:81:f5:
                    0a:82:36:d9:f1:66:db:73:24:0a:0d:65:e1:2f:8a:
                    e1:4e:7e:2a:44:90:27:fc:26:6a:26:f8:25:93:25:
                    db:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:A2:A5:64:96:78:95:5A:A3:B0:66:FF:49:BA:9D:AB:13:5C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba0a543-ac21-3f49-b1ea-e29bbeb08e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:291::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d6:c6:e4:5c:39:2f:44:43:e9:3a:91:eb:4c:c8:20:94:ab:
         3c:4e:ab:c8:58:69:3e:4c:f3:51:af:f2:92:97:fc:0b:8c:c0:
         a2:76:59:db:25:44:3a:a6:c1:e5:d7:8f:b5:6d:54:05:1b:ca:
         ce:7e:e5:ba:78:e5:94:ef:61:78:27:1b:de:f2:76:c9:fb:5c:
         5e:c4:4b:b4:cc:c6:97:9f:2c:70:11:f9:0e:d1:ea:33:b9:60:
         f1:78:4d:88:e7:40:e6:5c:4a:de:86:86:09:12:af:c3:c2:12:
         01:6e:7d:b0:3d:ce:9d:14:4a:54:9a:23:c3:52:29:e9:ae:7f:
         bf:02:cc:e2:07:bf:04:e0:04:17:58:70:cd:1a:22:2a:53:61:
         67:98:bc:25:ab:9a:db:c5:74:bc:a9:1d:fe:d7:a0:e5:ac:1e:
         fa:08:ce:bc:e3:54:8e:4b:c1:21:d0:d7:f5:6c:a7:5c:ef:a8:
         e1:c5:cc:07:44:b7:24:21:8d:78:b5:43:3f:81:6a:ca:2a:1c:
         41:d3:e2:dc:e6:6d:91:c0:b5:9e:1d:33:22:e1:45:9c:98:34:
         eb:c5:cb:98:8b:09:75:c2:d2:11:13:96:fb:15:96:47:45:74:
         bf:af:66:2c:1c:a8:8b:a7:10:2e:54:76:60:52:9f:9f:42:15:
         d7:cb:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:06 2025 by rpki-client