Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa
File:                     c36241c5-6e73-3acd-81af-a58fa4976633.roa (raw, json)
Hash identifier:          s+UAQ6G5j8+UXsWQVwS26ckv3fvP/caWX2TatUweIGQ=
Subject key identifier:   58:8F:91:75:05:05:97:8D:8F:DB:FB:8A:3D:26:12:A1:BD:2E:30:9A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AF521312752B3406FDEAF51C0
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1280
IP address blocks:        2001:4f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:27:52:b3:40:6f:de:af:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=70cb326e-890d-41e4-b435-3a82a395f053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:70:88:5d:12:bc:aa:f2:b3:f4:b1:5a:21:
                    00:e5:df:59:d1:14:25:93:e1:04:76:6a:f5:2f:6d:
                    5b:bd:f6:11:01:36:02:55:44:6a:39:18:5c:fa:fc:
                    e7:d8:41:6b:80:47:da:de:5d:1a:ff:f4:d4:44:03:
                    ad:fa:fc:d4:1a:28:8d:7c:d1:d6:94:a7:19:94:9e:
                    cd:fd:5f:24:54:30:d7:b2:fa:a4:10:05:c5:e4:ca:
                    9d:cb:3e:c5:43:38:bf:e5:4a:04:e7:92:68:5b:a3:
                    86:7f:db:25:3e:77:90:07:8c:6f:65:ed:f4:65:54:
                    05:55:2d:67:1d:dc:e5:b0:43:40:f6:4c:e5:bb:2b:
                    d6:25:3c:b6:cb:f8:a0:da:54:84:1e:39:ae:a7:bc:
                    bd:07:d1:68:a1:7e:df:a2:67:4c:e7:fe:d6:46:4c:
                    70:3e:ad:86:7b:3a:38:c4:55:b1:21:fb:20:1a:e5:
                    ce:f7:b9:fd:53:5f:00:fd:8c:65:52:83:7c:4f:18:
                    6d:5a:e2:43:90:19:27:fe:1e:d9:75:76:74:35:71:
                    af:04:8c:29:8d:1e:80:c8:52:90:f2:76:08:8f:53:
                    8e:d3:82:53:72:7f:0b:a1:d8:00:b7:d0:93:c8:bc:
                    9a:53:d1:06:c9:c9:ad:07:88:d0:70:50:70:a5:16:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8F:91:75:05:05:97:8D:8F:DB:FB:8A:3D:26:12:A1:BD:2E:30:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/c36241c5-6e73-3acd-81af-a58fa4976633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:1e:01:c3:90:34:72:e3:f7:2b:93:ba:31:88:81:6e:86:
         46:eb:ac:62:92:a3:63:28:b7:ce:7e:bf:2c:d0:23:cd:d3:8b:
         de:23:47:9c:a6:58:59:0e:37:47:dd:e8:f7:fa:22:ef:31:94:
         32:c5:fe:85:1e:77:9b:dd:33:e9:1e:4e:df:e0:42:1f:b3:53:
         48:85:9e:3d:2d:df:70:ad:9d:fb:16:4f:65:8e:d9:61:d2:1b:
         b4:85:e8:7b:ec:4b:c1:86:1f:aa:1c:3b:2e:a3:4b:c4:39:fe:
         22:00:74:89:73:ec:3e:9b:61:46:b4:10:ca:a5:d4:ba:67:57:
         6b:48:de:63:0b:b8:ea:33:93:35:5b:89:8f:b0:05:75:e8:e8:
         ea:18:3d:12:7f:87:2c:0c:36:d0:3c:a4:02:e6:5f:97:75:8a:
         72:50:11:e0:fb:bd:3b:cb:e1:c0:5d:d2:a8:70:7e:28:0e:c4:
         e1:06:e8:67:ec:71:41:7f:2d:87:70:b3:94:e8:96:86:fd:37:
         20:db:d5:0f:47:ec:49:e5:e6:3b:18:70:2f:1d:b1:88:4a:78:
         85:39:85:74:49:1e:d5:cd:88:0e:dd:5e:71:57:7d:2c:91:5c:
         3e:b1:0f:56:0e:db:48:55:54:4d:c7:64:02:25:94:16:d1:2a:
         ce:72:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 21:34:38 2025 by rpki-client