Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa
File:                     1a27f483-55e2-3798-a805-046502b1533b.roa (raw, json)
Hash identifier:          4o6eRuYQgxvwkHwDO1j2QAvLJBZSX/ISrXjM8ePKT5s=
Subject key identifier:   48:E9:69:22:5B:CA:9C:9D:8B:A1:FD:16:79:A3:B8:42:EA:A7:DC:CC
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A74B5DF584CE04193F7CB5320
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     198949
IP address blocks:        2001:420::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:df:58:4c:e0:41:93:f7:cb:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=00410917-9ff6-4303-8d76-1dfa3c76ee4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:eb:54:1a:75:3d:ea:f8:f9:8e:97:24:f8:
                    0e:61:13:3f:26:28:27:d6:43:e9:04:bc:eb:06:85:
                    b6:90:80:ce:0e:3d:25:81:ac:76:87:0c:86:75:23:
                    95:76:5b:b0:43:da:2f:b6:b7:45:23:bf:03:0c:3a:
                    87:0b:e4:ab:6b:fd:94:59:39:f5:ec:15:f2:d5:9b:
                    86:68:63:7c:51:6e:35:29:d5:c8:d4:ce:29:47:dc:
                    38:66:d1:10:ce:8f:f6:f8:84:b1:e0:c3:16:3f:35:
                    df:5a:5e:1b:0e:b9:a4:80:59:af:b9:20:3d:fe:49:
                    f3:24:2d:57:cb:de:04:b2:08:06:b1:d3:15:4b:77:
                    25:31:88:e9:ea:d7:e7:37:0d:94:ab:2c:d9:01:3b:
                    3f:ac:04:08:fc:9c:97:a7:e4:1e:8d:fb:be:07:7d:
                    53:b4:98:14:a3:4d:b1:3e:f8:cf:0a:48:45:52:0d:
                    28:47:a4:52:45:d1:9c:41:b4:37:0c:81:9e:8c:f2:
                    1d:62:86:85:8b:01:de:5c:9b:b0:06:31:ca:b1:5d:
                    9c:8e:9c:e4:97:f7:a8:2d:1f:86:c9:f6:eb:be:e2:
                    88:5e:b9:63:6f:58:03:95:52:a9:89:a1:b6:d6:fd:
                    f3:e6:98:e6:b6:c7:41:9a:e5:fb:0a:a2:8d:06:3d:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:69:22:5B:CA:9C:9D:8B:A1:FD:16:79:A3:B8:42:EA:A7:DC:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:420::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:05:e3:73:a7:09:5b:0a:c8:f2:fb:5c:a3:b2:5f:25:1c:e1:
         7c:31:4d:df:21:37:c1:a4:25:44:09:88:75:9a:42:41:23:fc:
         93:f0:c0:4b:2f:06:02:79:7c:24:e4:66:af:48:a5:7e:c5:8f:
         74:3e:4a:c9:2a:d6:14:5c:88:7a:ea:c0:74:da:e0:fc:ad:c8:
         a4:c2:83:d0:c5:1e:76:2c:a2:3e:7b:ed:fd:b3:8c:eb:7e:46:
         df:e4:e5:6a:92:3e:70:cf:26:72:39:53:91:01:56:a7:a8:fe:
         aa:7e:60:0d:fa:ee:d9:9d:fe:b6:a2:5c:07:4c:20:7b:ec:23:
         6c:0a:52:73:3f:fc:a1:de:13:12:f1:40:68:ce:36:80:79:e8:
         37:81:f5:fa:a4:8a:89:a5:bc:99:e7:67:b0:10:a0:11:cc:29:
         9c:ed:f9:19:1b:03:22:38:86:74:97:12:84:92:62:85:9f:37:
         e7:48:c2:df:67:49:98:1e:ff:6c:cd:d6:e7:d1:eb:52:95:b2:
         ee:a7:9a:0d:65:ad:03:9a:5f:3b:25:cc:73:6f:65:86:1b:78:
         25:5d:9e:44:e2:c9:8a:13:e2:17:b8:dc:e0:f4:af:ba:f6:e7:
         22:7e:e3:f1:76:e2:2b:a9:11:03:73:89:ea:3a:de:ff:c6:2c:
         8b:11:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:12:32 2025 by rpki-client