Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa
File:                     ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa (raw, json)
Hash identifier:          YzK3x+Zkd5wal2w06KP9ojHW5dlP24EdQ1ruo+ZYxUE=
Subject key identifier:   E9:71:1C:A7:D7:56:26:A3:F5:D2:0F:CF:8C:47:20:BA:31:85:A9:95
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AECC145B9AABF24BB4E658A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     2914
IP address blocks:        2001:418:3ff:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:45:b9:aa:bf:24:bb:4e:65:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=34f9a014-cdf9-4ac4-8a11-0d1f4dfceb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:fe:cc:ca:01:62:34:bc:0a:5a:f5:bf:d2:
                    cf:60:e8:64:6d:f1:1b:e2:4c:a9:a5:2c:b2:38:2e:
                    7a:5d:b0:33:90:5a:b6:97:61:45:c1:f6:3b:4b:36:
                    d5:e5:cd:53:58:a2:26:10:8b:ec:42:53:43:66:be:
                    79:94:59:bb:d8:3b:83:e9:0b:38:c3:96:29:95:d0:
                    2b:75:b7:43:25:d4:20:65:1d:c5:40:85:eb:62:e6:
                    3c:02:30:66:e0:3c:02:f2:0e:63:04:be:bc:c3:87:
                    c1:df:6b:39:e4:c7:3a:7b:e3:f1:c1:c6:2a:51:6d:
                    dc:60:5a:38:2e:a5:6b:20:e8:66:e2:5e:86:84:35:
                    9d:f6:ba:fe:84:ff:39:f7:8d:03:9c:b8:94:a9:77:
                    d3:4c:eb:d5:b9:c0:3e:4f:40:f4:a3:5f:e2:48:30:
                    88:6f:6e:5d:81:03:5d:0a:e8:9d:72:eb:97:c4:c9:
                    98:8c:44:68:0e:de:9a:dd:3c:a1:16:8e:62:2c:9b:
                    30:74:76:e7:fa:8c:a4:c1:10:a7:40:62:69:db:da:
                    19:27:9e:ba:0e:38:24:f1:cb:77:4f:68:7b:7a:d3:
                    b1:19:30:45:39:24:4c:6f:73:e6:e2:67:d4:72:84:
                    1f:f9:a6:71:89:6c:96:4f:8c:2d:10:96:17:3e:bd:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:71:1C:A7:D7:56:26:A3:F5:D2:0F:CF:8C:47:20:BA:31:85:A9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ea7bc95c-bc4b-3f59-beae-7f4bd60a8c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:75:ca:70:df:84:27:72:c1:69:1e:0f:3e:96:92:39:b2:d6:
         af:6e:05:b9:e3:de:1b:05:09:1d:ed:1f:2d:e1:71:37:fd:a9:
         15:06:a3:d0:49:20:ae:12:e0:44:4e:fc:44:ee:43:ba:50:e1:
         d6:90:de:08:6c:fa:8b:b5:47:87:35:e1:46:8e:ac:5d:24:f3:
         2c:12:53:e7:14:7e:93:14:6f:6f:c2:9b:dc:5b:19:cc:a9:1a:
         dc:f2:69:28:ce:c1:c4:56:8f:44:be:83:57:e5:b7:e7:20:41:
         6f:09:33:b4:10:19:05:de:5e:a3:1e:a0:d5:36:d8:85:f6:b9:
         7c:d2:37:a7:1d:06:43:ec:b3:be:3b:7c:f2:89:91:85:a3:85:
         ff:38:4f:78:8c:d2:8b:31:0d:e9:17:54:1f:78:48:a1:70:18:
         fe:84:b1:cd:00:c4:db:f0:e6:77:77:8f:f7:ce:76:49:74:ad:
         81:7d:d6:3b:eb:c6:46:0e:5e:61:94:0e:cd:fc:b5:bd:0d:27:
         89:85:ab:91:52:87:e0:6c:ea:e0:f8:27:8b:2c:cf:7a:f9:b4:
         c0:51:b8:2f:5a:58:0a:bc:2c:93:aa:03:d2:96:18:6e:69:d4:
         cc:5d:81:4f:cd:df:30:d1:de:d4:52:1a:57:0d:c6:ec:63:3e:
         6f:70:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:57 2025 by rpki-client