Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
File:                     d391bb51-4a6a-32a2-9219-49391be11d04.roa (raw, json)
Hash identifier:          WEnMUh59EBUPOmSVrKD/1uloxyj5rw5WbXGNBHP6/pI=
Subject key identifier:   92:E0:11:69:40:18:8E:17:C7:87:13:0D:14:16:85:15:28:49:B9:94
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584ADD667D9DBEF4D265DB105780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2001:418:1401:18::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:7d:9d:be:f4:d2:65:db:10:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=5be6206a-58f4-4c91-bb06-7d0df8cab025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:54:ad:5f:d5:2c:ab:ca:89:21:bb:c5:13:
                    7c:a0:a4:cf:45:42:df:eb:8a:0e:8c:f6:87:e3:dd:
                    42:23:e2:d7:25:37:9d:b9:ab:da:cd:71:74:a3:32:
                    99:94:fd:49:bb:e8:e5:0e:79:ab:db:19:3d:2f:90:
                    ed:b3:3e:ee:40:1f:6e:ed:77:3c:5f:e8:6b:1d:bc:
                    76:bf:0d:22:8d:99:d0:ca:b6:4e:85:5b:f7:42:06:
                    d6:41:c6:8b:a1:2d:41:a9:d4:c7:22:98:c4:d0:53:
                    a6:1e:e0:57:61:36:c7:2d:3d:bf:8f:61:b9:69:9f:
                    79:96:41:af:8a:13:cd:d4:eb:2d:86:fc:54:4d:7b:
                    22:cd:72:40:85:f5:ba:ce:17:c4:3e:6b:84:3b:5b:
                    2f:3e:dc:78:c3:42:72:f8:1b:80:2f:5c:d1:a2:94:
                    85:0c:81:a4:f5:dc:b2:d3:2a:c1:e0:e5:1a:3f:b0:
                    92:24:f8:55:b2:70:9d:40:1f:91:3e:98:fb:0a:a6:
                    b5:d0:74:5d:55:70:72:bd:25:21:58:f1:09:ed:43:
                    9b:07:13:3c:f2:bf:ea:a0:5e:08:79:9b:4d:08:29:
                    29:c9:5c:75:59:9c:55:67:7f:7e:70:2b:91:1a:ce:
                    d3:06:fc:94:4d:59:b5:b1:65:fe:41:ee:c0:a7:6f:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:11:69:40:18:8E:17:C7:87:13:0D:14:16:85:15:28:49:B9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:18::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:7c:ad:bb:e0:71:af:7f:84:4e:7d:30:44:43:87:4d:d2:ed:
         9b:98:2d:d8:6a:74:58:0c:50:36:95:73:ce:7b:ad:13:33:55:
         57:67:d4:65:5b:28:c4:43:ba:70:28:c1:aa:6a:ca:bf:d4:2b:
         19:2d:b4:a6:b5:98:a4:d7:83:6a:2f:55:be:8a:1b:88:1d:8c:
         ee:80:12:f4:70:fc:78:06:da:5a:8d:97:9b:c2:d6:fb:2a:06:
         6e:f0:a7:24:d6:17:56:99:aa:2e:fe:71:85:2e:64:01:e1:0d:
         58:c4:da:ef:29:96:ad:54:b7:dc:89:a4:b7:50:da:3d:e4:d8:
         3d:bc:01:f0:ce:61:e6:b6:9f:5b:1f:c4:7f:81:d6:94:83:92:
         9f:c4:c6:5f:73:6b:c7:21:a1:f8:bd:f9:a0:fa:1d:dc:30:5f:
         07:9b:78:43:2e:5d:4b:2e:a3:1b:55:85:95:75:50:cc:eb:4e:
         6d:dc:31:2b:95:ef:30:ea:76:12:48:81:a7:c5:1c:60:35:f0:
         2c:e2:e0:6f:74:f3:49:99:19:a4:19:c3:41:d6:42:a1:7e:ec:
         e0:0e:0b:db:6a:4a:f7:9b:79:ee:be:ab:c5:07:a1:a3:e6:65:
         51:38:e3:7a:e7:4e:38:a1:9d:ec:7a:aa:08:32:ed:2c:b1:15:
         04:fb:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:38 2025 by rpki-client