Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa
File:                     7884191e-e9da-384d-906a-28eba5a82899.roa (raw, json)
Hash identifier:          EIccXEXuFcqUELcX5kK5U2M9IHxANvVbor1QrjsXL0w=
Subject key identifier:   25:60:58:12:6E:FD:E1:63:5A:DE:33:72:09:13:13:25:3B:E4:B2:3D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD74C81336FADEAEEFFD4
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d7:4c:81:33:6f:ad:ea:ee:ff:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=b74e4264-5aa9-4f4e-ab21-df696262bd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d0:a9:62:12:c5:e9:4b:90:79:67:87:9a:f0:
                    dd:3b:0f:01:a6:33:ef:22:77:1c:0e:85:88:6f:a6:
                    ca:63:0a:80:89:22:df:64:23:e5:e5:e5:6e:dc:2d:
                    7f:a3:a7:e2:93:cd:a6:55:da:e1:b5:60:ee:f3:fc:
                    3a:59:d2:49:55:28:52:76:9b:db:25:c1:06:e6:ea:
                    cc:63:d7:85:77:b3:40:39:48:bf:f9:fa:22:41:0c:
                    76:fb:9b:30:80:24:ec:9b:e6:c6:c7:59:7b:e3:95:
                    00:44:d7:f2:35:2b:98:5f:50:15:71:ba:85:9b:50:
                    4f:42:a8:17:9b:f8:f4:a7:5e:88:a8:a0:95:6a:fb:
                    02:9c:54:63:49:ef:84:41:5a:86:fe:71:7b:95:e9:
                    f6:3a:d2:6f:70:da:bb:be:48:22:a5:a9:17:ae:59:
                    9f:b4:f0:38:f6:b8:72:df:7d:b6:4d:84:52:8f:c8:
                    dd:16:3f:56:20:87:a7:24:27:e1:7d:68:81:ec:48:
                    f1:e6:7d:f1:be:ea:ef:7e:2f:f0:14:65:5c:2b:0e:
                    89:1a:61:49:ac:6b:f8:9d:e1:03:57:78:76:3b:26:
                    3f:15:67:42:16:74:22:7c:5e:0c:73:bf:d1:4b:37:
                    4c:56:9f:ac:96:a6:38:b3:cf:b8:15:b8:95:c8:18:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:58:12:6E:FD:E1:63:5A:DE:33:72:09:13:13:25:3B:E4:B2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:8d:c1:1c:55:22:69:22:64:7e:83:95:73:82:07:96:47:
         d5:ae:6a:7c:c0:56:80:f3:d7:a9:2f:44:27:cb:16:7d:bf:74:
         b7:4e:d2:c4:0e:88:be:29:6c:52:0d:bf:2f:fd:62:1e:4b:c5:
         be:fe:c2:fe:b0:a6:24:d5:3e:fc:dd:ff:96:49:49:22:49:70:
         fa:c9:15:b4:e6:c3:0a:1f:27:5c:a0:65:e3:31:94:e6:83:f6:
         ce:ce:3b:11:68:41:af:b6:f0:0e:eb:1d:29:48:c3:e1:d1:fb:
         0f:4e:08:d5:b7:bc:b1:2e:e4:d9:44:e3:1b:c2:09:89:23:9f:
         60:ae:1e:d7:35:63:4e:61:6a:c6:2f:2c:f9:79:5c:b3:64:10:
         6d:e3:99:c2:bf:30:68:03:c9:a1:ce:9a:0e:22:21:da:4f:9b:
         37:52:9c:49:b3:7f:f5:6d:32:d7:7d:3a:ce:8f:56:70:05:e7:
         63:95:a8:90:01:36:e5:42:7a:b8:30:fd:3f:3f:f6:44:51:cc:
         08:15:6c:67:19:fc:23:35:62:fc:00:c0:7b:36:6e:54:06:61:
         47:1c:c8:e4:76:1e:2e:6e:e9:91:13:55:b0:05:10:58:31:83:
         06:a4:bc:b0:4d:20:bf:28:b8:58:1a:e3:fc:24:3b:92:02:e9:
         51:fd:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:00:11 2025 by rpki-client