Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa
File:                     d603a26c-ea53-32b6-85e8-790c5c1c3366.roa (raw, json)
Hash identifier:          vWiqc66yfh304fNMhSCyN6nCXBbnpw8Yo5PIXeXnOnA=
Subject key identifier:   49:29:95:4D:72:72:BB:4E:D5:D3:6A:A3:2E:B0:CB:82:24:29:19:51
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584A2C20177E28903B2BCF977800
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     63129
IP address blocks:        130.51.96.0/22 maxlen: 24
                          2602:f87f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:17:7e:28:90:3b:2b:cf:97:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=872e5de0-0862-411d-ad7e-0cf4e6a95e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:7a:9c:96:f3:22:2b:79:d8:1a:7e:71:ef:
                    27:97:fe:11:84:7e:9e:0e:fc:92:32:c0:d1:4a:46:
                    5d:3d:c1:3a:b8:5a:be:44:ea:5e:e1:ac:f2:46:dc:
                    02:a3:f8:e9:cc:52:6e:2b:e9:1d:18:e5:a3:a1:4d:
                    7e:df:09:68:06:f0:1f:61:5d:75:f6:66:6a:da:bf:
                    74:99:1b:75:0f:33:cd:55:c3:ba:59:88:51:7b:37:
                    a3:66:3a:0a:db:88:12:2f:53:f2:34:fc:9b:2f:94:
                    7b:f6:3a:d4:29:53:85:c3:dd:01:0e:46:4f:00:52:
                    71:60:3f:64:c0:9f:b3:3f:68:5d:bf:8a:6b:4d:64:
                    c4:3c:b7:1b:02:58:e1:10:62:19:0a:95:07:7a:5a:
                    3d:d3:af:2d:67:10:00:9c:29:f2:f2:d6:ac:8a:c8:
                    7d:23:e2:fc:7d:9c:f0:0c:07:ed:f1:30:54:45:f6:
                    d3:1e:b4:0e:81:5c:d0:5d:74:03:71:e3:a0:5e:1a:
                    f9:2c:21:9d:73:14:41:a1:88:41:6a:91:73:03:e6:
                    22:d3:cf:f2:63:ff:08:23:70:77:75:6c:61:91:a0:
                    b6:eb:31:4a:eb:38:9b:17:3b:38:17:48:76:1a:3e:
                    29:82:d4:04:40:49:2f:a5:f3:90:c4:da:66:f9:a2:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:95:4D:72:72:BB:4E:D5:D3:6A:A3:2E:B0:CB:82:24:29:19:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/d603a26c-ea53-32b6-85e8-790c5c1c3366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.96.0/22
                IPv6:
                  2602:f87f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:81:d6:3a:5c:18:7b:de:36:9f:5b:1d:90:e0:76:b7:66:1f:
         a0:b9:e2:34:df:30:e4:cb:68:f9:99:03:b0:e2:72:a5:06:53:
         2b:43:57:98:1a:73:17:2f:8b:18:c9:ea:21:8d:86:38:60:e3:
         2b:0d:43:4e:1f:34:68:96:61:69:41:4d:15:71:13:8e:5d:2a:
         c8:dc:95:b8:16:6b:6d:f9:a1:bd:93:f6:07:cb:9d:3c:79:0f:
         33:85:bd:7e:6c:0e:8e:5e:a4:f6:8f:9d:d3:b5:2d:79:db:db:
         d6:0e:fd:70:0c:3f:c0:cb:de:20:f1:c6:74:8a:85:b6:be:b5:
         e0:9c:8c:ab:2d:7c:10:f8:03:90:4a:af:4f:0e:53:c9:f3:8e:
         3d:fa:a2:ab:50:ee:a3:1d:b0:e9:55:0f:ec:95:5d:6d:e5:27:
         a4:da:30:0d:46:c5:43:63:b2:d4:95:21:d9:4b:fc:be:8b:a2:
         7a:22:81:b1:3e:15:b6:d3:0c:71:53:39:e7:33:8a:c9:fc:e1:
         c8:71:0a:78:27:13:84:bf:5a:42:2a:04:7c:a5:13:a6:74:b6:
         2c:43:b9:9e:88:74:c8:a0:36:2f:13:8c:7c:cf:a6:a7:fd:b9:
         f0:b8:56:6a:6a:08:a1:30:3c:39:d2:f7:35:1c:ee:20:de:9f:
         ab:61:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:43:29 2025 by rpki-client