Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa
File:                     857f8519-5259-3051-b3a3-cbed201e7089.roa (raw, json)
Hash identifier:          5A9LbdFV7eyqnKB4j1TaE2EOErhx+c3YQP8rMyeL85U=
Subject key identifier:   69:AC:BB:96:B5:35:AB:94:D0:DB:06:6B:CE:FE:10:94:3F:B7:91:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A979B79828787DBEE54DBC5A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa
Signing time:             Mon 21 Jul 2025 13:01:04 +0000
ROA not before:           Mon 21 Jul 2025 13:01:04 +0000
ROA not after:            Sun 19 Oct 2025 13:01:04 +0000
asID:                     213291
IP address blocks:        2001:470:453::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:97:9b:79:82:87:87:db:ee:54:db:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 21 13:01:04 2025 GMT
            Not After : Oct 19 13:01:04 2025 GMT
        Subject: CN=b7b02411-b5a6-4220-bef5-0d436f428849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:dc:b6:13:16:b2:bf:72:52:3a:ac:b7:f1:4f:
                    0b:2a:20:af:20:fd:53:f7:1c:44:59:ca:38:23:eb:
                    de:f9:70:b5:e1:b7:3e:09:27:55:20:ea:fa:b6:e9:
                    b8:71:58:e9:61:62:6e:ab:13:55:33:62:13:86:92:
                    fc:06:97:c6:cf:b3:6a:e9:1c:05:3e:7d:07:ba:b6:
                    5d:7a:39:c0:ae:bf:43:2c:cb:3b:f4:e4:b2:d7:19:
                    3e:d2:e4:3a:29:7f:7e:4e:61:75:4c:bb:9c:13:0c:
                    79:d4:5b:31:9b:a6:40:5b:eb:19:ba:b2:a5:a9:49:
                    1a:87:1b:7b:e4:a2:0d:d6:10:ca:d5:fc:fa:26:4f:
                    a8:98:2a:3c:5a:36:c3:bd:06:41:cd:80:78:8e:91:
                    21:d0:95:be:87:a8:44:df:ec:88:85:e6:f1:75:a1:
                    74:0e:bd:bc:41:75:cb:0e:dc:6e:b5:09:a7:0a:31:
                    01:df:10:b9:bd:f3:29:dc:1e:71:64:d2:8d:16:d9:
                    af:fe:f6:c1:bd:83:03:ae:49:c6:b5:60:3a:0b:b4:
                    aa:22:9d:90:b1:35:9f:e3:e9:11:5a:42:8c:bf:03:
                    df:a5:cd:1f:f0:c8:d0:6a:d6:fa:23:e6:cf:26:dd:
                    ea:60:0d:d6:0a:e9:68:be:4a:db:86:f8:9c:e1:b9:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:BB:96:B5:35:AB:94:D0:DB:06:6B:CE:FE:10:94:3F:B7:91:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/857f8519-5259-3051-b3a3-cbed201e7089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:453::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:91:77:2b:22:e5:67:b8:e0:64:61:0e:ba:ae:7e:d7:e9:89:
         e0:1f:04:bf:2c:52:b8:2c:ea:ef:40:e1:0b:df:6d:d1:96:50:
         1a:b4:41:0f:06:76:2a:88:26:48:02:30:da:50:7b:b5:0d:b7:
         9c:78:b2:3c:11:b6:fd:68:55:8e:4e:29:98:1c:c2:bb:c1:b5:
         e4:16:4a:7b:cb:ff:91:24:27:7f:10:c7:94:b6:67:86:54:1c:
         7c:eb:d5:d5:da:c2:79:43:ba:1d:6f:fc:bf:ba:f5:e6:22:b9:
         85:ca:bd:35:e8:bd:15:70:27:aa:c2:73:c5:64:3e:09:4b:06:
         65:f1:42:6c:32:64:00:9a:ae:74:73:33:1b:78:b6:8b:91:1a:
         d3:c2:70:0c:1a:de:41:87:7d:cc:02:77:d0:7c:1b:a8:cd:5f:
         d3:92:14:6c:44:bd:ad:f4:0a:ef:b0:23:a6:c6:66:7f:26:a0:
         e3:69:8d:1b:3f:92:b3:ec:dd:f7:13:ac:3a:d2:57:12:4d:a3:
         59:5e:51:67:e9:fd:62:17:ee:b0:e7:f5:eb:56:4d:2f:94:fb:
         25:ec:9a:dd:fa:51:5e:ab:af:f8:e5:94:07:dc:45:06:e1:1b:
         19:be:b1:41:9b:17:90:b7:65:aa:29:70:81:42:28:81:98:6e:
         9c:5e:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:21:25 2025 by rpki-client