Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
File:                     53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json)
Hash identifier:          ObLp4XNyKz3wWSLzpZff0nL2B9XNeGOmd85MblNg2cs=
Subject key identifier:   1B:FC:9E:53:D0:B1:04:B0:F7:E5:7A:CB:48:39:8D:76:44:52:CD:3F
Certificate issuer:       /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
Certificate serial:       010D0C9F43285849E225367045A9E58038BD9980
Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     32181
IP address blocks:        2001:1850::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:36:70:45:a9:e5:80:38:bd:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f7ca76f6-e119-4385-ad60-9c07c8859ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:65:7d:0f:4d:32:59:3e:f6:4e:45:c9:99:
                    5d:3f:f9:c2:d3:db:f3:5b:24:c6:b8:b7:85:74:0a:
                    99:82:55:a5:4a:03:89:e8:71:d9:7c:ba:47:fb:70:
                    17:e6:e7:13:d5:71:48:92:12:1a:8b:23:10:8b:f0:
                    9e:bb:98:e1:72:51:de:8c:40:3d:34:2e:45:21:fd:
                    d4:07:9d:94:c7:6a:d1:e7:bc:16:f6:2a:1d:f5:bb:
                    9e:ed:e7:0b:57:ca:48:2d:ac:11:16:2c:6c:2f:e5:
                    cd:89:22:e0:f7:cf:55:3a:fc:47:5c:83:fd:82:2a:
                    fd:1e:b6:f6:06:2d:c9:a4:2a:97:3d:b9:06:e6:1c:
                    94:1c:d9:ec:b4:ea:0f:6d:13:86:5b:81:bc:c4:a8:
                    f5:91:a9:cf:03:26:14:2a:1c:5a:9f:82:dd:11:1c:
                    70:36:3a:1e:7d:89:16:09:b3:b0:83:24:2a:f6:0e:
                    c2:fa:ff:d3:5a:7c:23:29:50:51:5f:97:7b:c6:20:
                    7e:af:59:79:56:fb:e0:cd:53:cc:56:97:4b:01:2a:
                    42:91:1b:e5:dc:09:a1:2a:08:bf:1d:81:c8:8d:bb:
                    85:09:7b:93:5f:f3:8a:5a:63:b4:7f:9f:65:0f:5c:
                    1e:4e:05:05:28:eb:02:e1:90:a0:87:e1:92:de:68:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FC:9E:53:D0:B1:04:B0:F7:E5:7A:CB:48:39:8D:76:44:52:CD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl

            X509v3 Authority Key Identifier:
                keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1850::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:55:a6:ca:bb:37:2a:b3:4f:c5:4c:c0:82:b1:01:6f:12:f3:
         cb:12:27:de:f3:66:0e:2d:51:9d:48:bc:81:1d:a5:84:aa:3f:
         02:78:70:61:03:ba:eb:9a:90:63:32:c8:23:e1:12:26:9b:1c:
         ce:07:0a:f9:22:7e:5d:6d:70:cb:66:7f:0d:8e:b7:3a:c7:3a:
         99:2d:f8:dc:ab:c7:80:93:7d:91:0f:a4:2e:52:f9:5b:c4:1b:
         7f:0b:2f:43:c1:b7:69:a6:58:ab:db:c5:d5:59:f5:76:f2:e3:
         54:ea:30:a7:69:c5:2e:c0:e2:8b:5f:31:97:0b:53:a0:cf:b7:
         6f:76:41:48:80:08:27:61:67:e6:55:e7:e6:f2:a7:85:73:02:
         d7:1d:7d:fb:db:a2:65:71:30:9c:d9:e5:c6:77:cf:53:8f:f2:
         07:b9:04:46:f7:af:09:7b:ad:03:73:11:ef:23:2e:16:6d:57:
         cc:fa:5d:c6:6e:80:5f:65:3f:c2:c1:63:b6:49:f8:6f:7f:02:
         ea:35:0b:b5:0a:b6:f6:d7:9f:f2:14:87:48:f0:72:7a:62:30:
         61:7d:f9:48:6a:1c:33:b7:ec:e5:12:99:e9:bb:f5:09:87:8b:
         81:4d:63:e6:fc:38:0d:0d:da:08:14:6e:56:b4:57:2b:eb:de:
         10:b5:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:40 2025 by rpki-client