Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa
File:                     e2d7c243-cefe-3545-86f3-de8081a2ab55.roa (raw, json)
Hash identifier:          Lmsruwd+1AYqlNGwi9VGUOPCQtrdClrGk6fW3cdxu7I=
Subject key identifier:   5A:E3:93:09:CB:3C:92:C1:52:CA:1C:AD:AE:43:9F:F7:E3:E0:B6:A2
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584B16A15E8BDF6D62E08EE69D80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     6621
IP address blocks:        2001:5b0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:5e:8b:df:6d:62:e0:8e:e6:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=7c965b2a-3a86-4a6c-8278-94fe9a621009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:e5:09:46:a2:a9:fc:d7:0e:dc:a2:2c:2b:
                    46:b7:28:de:95:78:d5:18:f7:94:74:d8:8b:ec:a2:
                    cb:23:08:b7:11:48:c0:10:ba:a7:17:da:6e:95:3e:
                    d9:bc:cc:1a:a6:68:94:32:36:31:ac:bd:91:22:ce:
                    0b:fc:5d:bc:cf:b4:d5:ba:ec:e8:6f:af:32:b7:62:
                    0c:66:c8:a4:20:01:b5:28:75:39:00:89:fd:3f:f9:
                    74:db:73:2e:53:e6:cc:7f:2c:02:0e:10:1f:69:22:
                    2d:ab:2d:39:0c:fe:c0:36:87:cd:cc:07:3e:46:fd:
                    f3:65:2e:80:1f:2b:5c:36:45:c2:23:91:06:32:09:
                    c1:15:08:d8:31:3f:ef:6f:09:db:7f:ca:5f:c9:39:
                    f1:7f:db:a7:38:e4:56:b5:b2:02:fa:d3:bb:59:59:
                    dd:18:86:0a:23:00:87:c5:be:02:03:c9:78:e8:d4:
                    ee:6d:ef:50:15:9f:44:c0:aa:82:1e:d2:ce:0e:f7:
                    d6:5b:99:74:6d:99:92:25:bc:49:ab:d8:5e:43:cb:
                    7f:cf:d0:2f:6b:8d:9a:55:f7:d6:5a:17:c6:07:4b:
                    53:a7:d8:3b:04:23:4d:20:b7:7e:ae:19:a6:07:99:
                    41:07:bc:cf:18:96:93:98:dc:97:a8:bb:4a:c2:11:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E3:93:09:CB:3C:92:C1:52:CA:1C:AD:AE:43:9F:F7:E3:E0:B6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/e2d7c243-cefe-3545-86f3-de8081a2ab55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5b0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:db:c5:38:2f:b5:e9:0d:82:ca:94:3c:0f:81:39:05:34:5d:
         20:e5:ff:5e:56:df:ee:b3:f2:55:61:63:79:16:6f:44:6c:78:
         7c:b4:ea:40:7e:76:53:d1:40:08:ab:48:71:4e:79:3f:db:2b:
         31:b8:0a:12:d1:02:02:10:b7:7e:e3:d5:c9:d8:dd:fe:d7:18:
         75:cf:be:c5:5f:1e:fd:b4:e6:d7:c1:61:29:4d:f3:75:72:46:
         7c:34:af:09:48:46:c1:8e:06:d1:c8:a4:c9:39:0b:77:66:79:
         ab:ab:cf:d3:4f:63:19:07:f2:52:98:0c:49:79:5d:c4:2a:84:
         d5:d4:3e:af:f6:ff:8c:80:27:79:51:06:e2:7a:85:c2:55:4c:
         0d:fc:b4:d6:0a:ef:91:e6:b1:99:47:09:e0:cb:95:b9:9c:a9:
         7d:b1:d3:9a:d0:0d:6a:43:2b:62:af:54:d7:de:66:47:f2:7d:
         6b:42:83:4a:96:97:72:bd:85:3c:fd:3a:f3:7a:1b:2b:61:18:
         97:e8:3a:a9:ff:a4:28:65:cd:85:76:59:ad:e2:2a:c1:36:5e:
         05:73:10:c8:2b:95:4b:68:fa:5f:65:d3:3d:b1:32:5f:4f:5a:
         a8:e6:39:ee:49:1f:5e:cd:a5:dc:75:97:4c:b8:c2:c9:54:1c:
         2f:64:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:29:56 2025 by rpki-client