Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa
File:                     9372f1da-2319-36ef-b51a-176cc6e0a58d.roa (raw, json)
Hash identifier:          SOSfEPukpC+2wK3+iAMsyCZKrNPTJNG4yCxuLaO1Qbw=
Subject key identifier:   DD:70:03:A9:65:01:8A:14:98:CD:22:52:C2:31:06:16:3B:C4:5B:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFEDD703065678F5C6880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     43633
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fe:dd:70:30:65:67:8f:5c:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=04723771-6f5b-4d03-aa9f-f6feea442039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:ae:0d:1f:53:c8:be:b0:00:a6:8d:27:76:
                    8d:93:34:ba:e3:65:5b:97:65:a9:a9:11:f0:e9:08:
                    b8:a2:a9:dc:12:e7:22:39:df:1a:cb:85:05:66:f9:
                    5f:a1:a7:3c:f4:ab:e3:58:60:00:d0:d9:f9:56:0a:
                    34:1e:c3:7a:56:82:fa:5c:ad:ba:de:30:a8:2d:e4:
                    0a:e8:47:2a:81:26:09:27:04:44:83:66:93:c5:08:
                    18:37:9a:15:b3:ac:57:81:d2:64:9e:26:db:98:92:
                    b6:35:ea:34:eb:ea:7d:2f:e8:5c:48:f6:c6:90:96:
                    6a:58:2f:06:8d:c5:02:29:0d:55:83:93:48:b6:85:
                    30:60:32:01:a3:7a:22:60:bb:0b:4b:eb:6c:93:91:
                    c5:ed:34:98:6b:b9:c3:64:40:d5:72:55:71:43:72:
                    79:3c:2c:c0:89:e6:81:c9:91:39:94:7f:2b:18:48:
                    a6:34:45:a2:81:19:13:64:b8:64:2c:61:dc:d2:94:
                    09:80:1e:f4:fc:d1:1f:46:3d:9e:e4:f2:76:a1:bf:
                    ed:9a:1d:92:ed:3c:b0:2e:a6:35:d4:be:31:69:b5:
                    a4:8d:be:8d:f7:8b:87:3d:b6:cd:ed:a2:8b:ce:fa:
                    74:eb:86:26:32:23:c7:f4:8d:65:71:07:04:10:0f:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:03:A9:65:01:8A:14:98:CD:22:52:C2:31:06:16:3B:C4:5B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9372f1da-2319-36ef-b51a-176cc6e0a58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:0e:31:c8:c4:96:7e:17:af:e4:fb:fc:34:cc:8c:65:ce:
         18:dc:e0:42:a7:9e:3d:60:d8:67:ea:41:1b:87:57:af:4a:5d:
         57:95:80:55:86:c5:1f:b6:58:f5:17:82:06:2b:a5:9d:c8:66:
         25:4a:57:20:8a:69:35:35:c7:b2:37:d7:84:f9:64:de:06:28:
         37:47:fa:7f:40:d0:75:ae:98:ab:33:35:f2:ed:2b:78:ba:9b:
         2e:e1:5e:8c:ae:aa:fb:0b:76:b5:48:b9:25:b6:4d:a9:71:2b:
         da:02:89:53:54:f5:89:56:93:52:07:7b:d8:4c:a3:ab:86:9d:
         aa:bc:33:a0:05:fb:05:ac:18:f6:67:c3:67:ca:aa:2c:39:8f:
         34:95:eb:74:aa:98:36:1a:88:d2:30:e5:ef:5e:15:aa:09:59:
         d6:fd:de:de:6a:d9:9a:73:9b:d3:b9:ba:88:b9:cb:92:7e:92:
         2e:4c:83:74:04:e1:a6:d5:80:d4:16:30:75:07:e2:b1:ed:26:
         67:35:2a:0b:c8:7a:15:c3:b7:74:b6:0e:a7:45:c2:c6:06:7c:
         54:3c:a5:1c:3c:6f:d8:89:97:fe:ff:54:49:be:e3:f9:0a:dd:
         5c:47:f0:cb:34:b9:3a:78:5b:76:03:e4:17:f4:d1:de:3e:29:
         6b:36:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:57:28 2025 by rpki-client