Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
File:                     a0bffdaa-855e-3b5b-bc22-19615208b92b.roa (raw, json)
Hash identifier:          9YybGcE44AerMhCBCXDluEFcfz96t27DM3KUyl/XFZM=
Subject key identifier:   A2:F6:AD:2C:CF:CF:20:1A:E9:C2:94:C1:CC:77:50:16:10:E6:AE:42
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AF95143DB3EBDBF8B467A3C00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     30133
IP address blocks:        2001:500:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:43:db:3e:bd:bf:8b:46:7a:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=139557f5-dc61-4d7d-87ae-9387d2346d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:78:1e:d6:95:b8:68:61:96:bf:69:ac:8c:
                    ce:8e:a1:8f:55:dd:be:a1:b2:c0:27:68:28:1a:81:
                    7f:e8:f3:d7:2d:d4:72:8c:67:6f:d6:c7:b5:62:70:
                    17:88:ce:32:03:02:83:80:c1:d4:cb:33:db:d4:d3:
                    ab:95:1e:3b:4a:e5:31:0b:4c:e5:c8:e5:07:f5:3b:
                    02:8a:83:e0:a3:a9:72:17:91:58:14:63:dd:54:5c:
                    03:56:ef:d3:cd:f6:d4:a7:42:9d:4b:63:2b:4e:71:
                    57:df:1f:74:57:f5:b8:fe:ed:21:90:b8:dc:ad:32:
                    48:9b:28:bf:45:28:93:e8:f1:de:f3:b8:cd:4e:a1:
                    1b:8e:c1:2b:d4:dc:3b:4d:e2:60:e0:d8:6c:cb:a7:
                    00:10:77:7b:99:10:1a:83:e3:d5:f0:aa:34:1b:0d:
                    64:1f:95:5d:28:1d:bf:03:3c:53:c7:21:43:82:e3:
                    ac:04:b1:19:2d:7e:a0:6d:e1:a8:10:06:e3:d7:3a:
                    b7:e7:ad:0f:70:0f:fc:ab:41:aa:a2:ac:a9:35:18:
                    61:fe:a9:90:85:70:f5:d2:cc:59:78:c9:49:38:4b:
                    07:f5:9d:75:d3:71:81:89:bc:59:15:f0:18:d3:1a:
                    bc:21:df:4a:53:38:75:d8:bc:7f:56:28:42:47:a3:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:AD:2C:CF:CF:20:1A:E9:C2:94:C1:CC:77:50:16:10:E6:AE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a1:0b:57:6e:e7:e8:31:2b:df:54:9e:7c:8f:ec:d2:48:0d:
         42:16:40:82:da:10:75:51:ba:ff:09:71:07:f0:e9:a3:b7:28:
         1e:1e:50:10:53:aa:de:d0:6a:c7:de:db:0e:35:49:fa:f1:d9:
         60:b3:99:4f:09:4e:fb:24:89:b6:49:e4:95:6c:82:c3:7d:a7:
         ae:ec:3c:7f:e5:d6:9f:41:32:6c:6f:04:0d:41:c2:40:bb:2f:
         7a:5f:d8:ee:51:e2:55:e2:1d:9e:0d:74:a9:37:d4:b0:eb:e1:
         66:85:f9:0d:82:ce:5b:45:90:5c:da:bd:1b:e9:e3:ab:55:a6:
         62:5c:d9:f9:f9:6e:32:86:38:cd:ce:80:0a:c3:b5:d0:aa:cc:
         fa:27:94:ee:58:0d:95:d5:a8:6d:bb:da:0c:cf:2e:b0:ec:d6:
         0b:a2:e8:d0:33:d8:fa:47:6e:0f:db:86:38:7e:c8:6e:0e:d9:
         4f:c7:cc:03:57:f0:f8:41:8e:bd:b3:37:8a:dc:d9:25:f2:17:
         7c:04:51:cb:f9:1e:6a:1e:bd:70:0c:93:98:b1:ee:ad:29:49:
         86:21:20:8f:db:37:66:c2:7c:d1:fa:b5:8f:8c:a5:71:2b:29:
         2a:60:cd:02:27:a7:3d:05:7c:70:47:cf:36:da:2a:e2:7a:4e:
         25:4b:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 21:41:49 2025 by rpki-client