Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01e18ca1-1b46-3f25-8409-1f21b0bdd8f6.roa
File:                     01e18ca1-1b46-3f25-8409-1f21b0bdd8f6.roa (raw, json)
Hash identifier:          rLzglcBYeLuku3E9Aet2yE0/4UPHmouboxu7Jz2JOck=
Subject key identifier:   CD:CC:F0:11:2E:EA:EE:36:6F:DF:8C:DB:98:3F:E5:95:7D:F7:92:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A71EB560E08FB1576F4EF0000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01e18ca1-1b46-3f25-8409-1f21b0bdd8f6.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     396253
IP address blocks:        2001:470:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:56:0e:08:fb:15:76:f4:ef:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=32fa145a-26bb-4f74-bad1-f06d26b75e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:50:45:88:11:d6:33:b8:f8:14:ea:4f:ca:
                    15:a9:26:3b:a5:83:f6:14:b8:f4:4d:68:ec:07:94:
                    89:05:d4:f2:cd:de:21:9f:6b:a2:67:d5:94:f8:37:
                    16:31:91:e8:ea:48:fa:58:6a:41:c9:98:ef:bd:19:
                    5f:5e:ac:b4:2d:4c:58:96:dd:2e:f0:fa:d2:43:1d:
                    14:28:02:97:20:93:9c:f1:66:72:ff:38:69:4c:16:
                    e1:b9:d7:98:50:90:76:e3:a6:66:bb:2f:36:93:ad:
                    b9:53:8c:d3:48:a9:74:cf:57:ef:7b:5b:d3:0d:aa:
                    dd:74:a0:85:49:a2:cd:75:9f:4b:17:7d:eb:a1:85:
                    07:1c:7a:7d:4f:07:3c:97:fc:82:fc:b7:ba:3f:c0:
                    c0:83:cc:4c:46:93:4c:99:1c:99:52:0d:ec:41:44:
                    bb:d4:fe:2b:79:a8:8c:26:d0:9b:1f:d4:58:25:e9:
                    7a:72:42:ad:ee:bf:1e:52:20:ed:a9:b6:21:50:65:
                    e5:a9:a3:41:8f:11:be:8a:5f:9b:13:1b:98:a3:ef:
                    67:a8:10:ad:86:0e:f8:66:13:01:c2:ad:59:ff:b8:
                    60:ea:2a:bb:e5:e4:3a:2c:60:ae:53:a4:d5:72:7c:
                    a6:44:36:84:13:dd:02:b7:ec:47:ce:07:56:e3:16:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:F0:11:2E:EA:EE:36:6F:DF:8C:DB:98:3F:E5:95:7D:F7:92:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01e18ca1-1b46-3f25-8409-1f21b0bdd8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:45:b4:ce:7b:f8:04:17:e5:0a:7b:a7:41:80:01:87:b7:3d:
         77:8e:68:2b:86:dd:b9:3d:f6:46:55:40:2e:e6:8c:b7:e8:f4:
         08:2e:24:3a:f8:aa:43:85:a6:2f:cf:11:95:57:ab:02:85:6d:
         de:e6:81:b5:11:9f:81:83:b2:0f:a4:23:4a:c9:f7:c3:31:7a:
         00:72:e3:b0:2e:1a:2b:88:80:34:31:6f:58:76:b5:1b:80:5d:
         05:a4:f4:6a:55:88:67:86:84:e9:4c:27:33:48:c6:6f:83:ac:
         e8:4e:5c:e9:19:23:1b:83:41:73:e0:2b:d3:de:53:da:f7:ce:
         30:10:54:99:21:35:f3:0f:a5:4f:dd:98:22:be:c1:60:ba:46:
         fe:b6:62:a5:09:4a:9f:06:29:65:aa:17:89:cb:7f:84:f9:54:
         c7:af:2a:2c:13:5a:15:a0:81:97:de:12:da:17:12:17:0e:8d:
         8f:2f:ca:32:c8:33:e5:29:b5:54:22:43:6b:c5:e5:8f:00:2e:
         1a:2a:f3:97:4d:6a:77:61:07:0c:1b:26:9c:d8:ed:f2:ab:f2:
         cc:69:f4:65:d6:30:b4:c8:40:02:e0:96:a0:bf:0e:d7:b9:c7:
         69:7c:90:80:02:02:fc:0d:b3:08:d3:35:89:e2:03:48:20:67:
         3d:8c:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:16:56 2025 by rpki-client