Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
File:                     7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa (raw, json)
Hash identifier:          l5a2pNeS692r1FhbGr41x0UVVz28nP+d1SBzudcIF/Q=
Subject key identifier:   9F:EB:8C:37:59:92:8C:A6:BE:8C:D0:2E:83:F0:73:A7:34:5E:7A:28
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AD7D1177094771251F1D42C83
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:17:70:94:77:12:51:f1:d4:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=7a4ec808-84ff-4a61-b946-9ab5f87485aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:39:78:8b:31:ec:40:df:4f:67:01:9b:15:
                    6d:bb:3c:3d:3b:c5:87:a7:e3:e5:9c:7d:08:34:26:
                    10:9b:01:06:4c:fb:62:ac:17:80:38:49:82:a4:5a:
                    fc:c4:25:81:02:97:7d:2b:c1:35:ff:21:fa:96:49:
                    1d:10:fb:10:e9:e3:28:c8:c8:fb:45:39:73:c1:f4:
                    68:b8:41:0d:87:76:b9:6f:d7:32:ec:14:f6:6c:ba:
                    ec:cc:f9:6d:87:90:8b:cd:94:e0:75:4e:a6:22:59:
                    b5:cd:3e:be:d6:59:b5:f3:48:f7:83:ae:74:73:1a:
                    3c:4a:d4:c8:82:a9:0a:98:6d:d8:30:c3:70:5c:6b:
                    22:d4:d8:f6:a1:33:50:a3:d2:6d:35:23:a8:b0:aa:
                    c8:dc:85:a9:cd:9e:00:bc:f2:fa:2a:32:30:e3:f4:
                    b5:e4:5c:b8:71:34:28:68:5f:f7:c3:21:60:e1:c7:
                    a3:77:16:15:29:d1:26:b3:49:dc:e4:0d:d3:38:93:
                    16:d3:bc:c1:5e:9e:f3:e8:ea:00:df:8e:6f:e1:a9:
                    c2:98:80:cf:11:20:5a:b4:5e:2e:bb:37:d8:bc:58:
                    0a:8a:6f:c6:8b:79:40:57:d1:a2:e2:1f:bc:e0:3f:
                    04:25:db:3d:f0:df:e1:15:11:9c:c9:91:c3:03:4e:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EB:8C:37:59:92:8C:A6:BE:8C:D0:2E:83:F0:73:A7:34:5E:7A:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7c9d1fa1-f4fa-3e7b-9895-d323f207bf49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e3:75:9c:19:09:39:3a:c9:d6:61:ce:4b:a3:7b:c6:28:0b:
         71:56:b7:62:86:6b:99:ef:48:e7:d5:c5:e1:96:10:36:fa:98:
         d4:1d:d2:50:13:ea:a7:4c:ce:75:af:18:25:99:5c:e9:06:a5:
         4c:a0:b6:d8:eb:19:72:8c:28:47:25:01:c0:64:33:38:61:8b:
         f8:fb:fc:39:bc:c5:82:3b:e6:81:67:6c:07:10:26:db:9e:98:
         66:64:a6:3d:5a:7e:03:c4:a1:b5:1b:24:a7:34:f5:89:95:ac:
         8e:f7:8c:42:14:2b:a2:b9:f1:43:0c:f6:6c:90:a5:94:6d:04:
         74:e5:2b:3d:ed:01:59:cf:c0:2a:f5:3a:f6:ad:6b:8b:04:54:
         b6:b0:d4:6b:cb:af:ee:bb:6b:0c:52:84:ec:e2:4a:a6:7c:d8:
         06:24:f7:4b:2e:b9:08:a9:cb:f1:5e:28:cb:3d:8e:b3:62:e3:
         79:e7:09:fe:b8:3c:d5:00:d1:b0:de:e1:b8:59:7f:6c:26:90:
         53:67:96:1d:61:01:8d:90:9f:f9:33:5b:7a:9b:66:13:95:cb:
         06:21:ae:5d:63:96:2b:73:cc:ed:b6:7d:75:f6:45:59:25:ce:
         e9:76:85:7c:ff:10:94:21:6b:fb:72:8f:4c:9c:0a:be:c4:8f:
         12:6d:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:43 2025 by rpki-client