Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa
File:                     1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa (raw, json)
Hash identifier:          IqbKF9iz0pTRRCcobJjOMyusfQfR/TP0i6eEsLIuTPE=
Subject key identifier:   AA:9F:E1:48:7E:13:D0:CF:93:4D:AD:18:AE:FD:97:8F:7F:6D:64:22
Certificate issuer:       /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial:       010D0C9F4328584A3A158CE6B857C49D817F0720
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        2620:12a:c0a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8c:e6:b8:57:c4:9d:81:7f:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=058618cd-46d5-476f-858c-051dd3eb9986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:21:df:82:5c:bb:4a:ce:12:8f:1a:d2:68:
                    cb:9c:33:22:bf:1f:5c:91:31:3f:e0:12:ba:04:80:
                    e8:7d:a7:f2:8e:7b:d1:47:a0:81:bc:1c:92:a8:70:
                    73:39:1b:a2:b2:28:ee:34:5f:7a:e8:75:73:0a:c7:
                    52:99:a7:15:71:b6:e2:05:16:0c:5b:d4:05:7c:99:
                    45:fc:05:07:d8:4d:f0:e4:7a:f7:06:71:f8:fc:37:
                    3a:f2:2e:e8:62:9e:08:d7:bc:e9:5b:16:a2:48:0c:
                    42:08:1e:b8:89:a4:5c:45:43:bf:1b:7b:37:48:e6:
                    27:a9:98:91:75:37:36:c7:e4:17:41:58:67:c1:17:
                    33:6b:81:9e:8b:21:10:7f:70:37:29:65:a9:8c:26:
                    1e:dd:6b:c4:f6:34:54:32:c7:30:93:ad:93:58:1e:
                    32:c7:35:3a:a6:77:8e:0d:91:f7:17:b0:6b:55:30:
                    19:a7:5f:9c:b3:33:87:63:71:6b:6e:db:59:46:d9:
                    9e:fd:b2:5d:a8:37:82:0e:73:34:ba:f9:66:ab:e9:
                    00:52:de:ae:2b:d0:e3:af:d6:24:ea:df:83:64:a0:
                    07:7d:43:93:68:17:3d:06:8f:e8:d2:45:66:a1:26:
                    09:43:17:e5:11:0f:b8:92:40:0a:ed:6c:b4:a2:1d:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9F:E1:48:7E:13:D0:CF:93:4D:AD:18:AE:FD:97:8F:7F:6D:64:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl

            X509v3 Authority Key Identifier:
                keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12a:c0a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:18:e4:55:7a:a9:1f:90:66:0f:4e:f1:ed:df:94:ca:95:
         ee:b4:84:ff:58:6f:4e:40:eb:44:4a:65:d5:6d:88:60:2a:b3:
         54:05:0d:b1:6a:8b:ea:04:39:9e:49:be:56:61:34:a2:37:b3:
         4a:56:ee:4e:91:2d:fa:0a:16:6b:a4:5a:25:01:fd:6f:ff:95:
         37:bc:25:33:44:b4:c8:59:b9:6f:5d:ea:12:dc:4a:43:65:a8:
         d7:6a:8f:e7:77:f3:e4:85:9b:74:3f:b7:07:ec:d9:8d:8d:92:
         50:8f:e1:0b:1f:e7:5e:38:ab:d2:63:1f:23:36:27:02:e0:71:
         4e:ca:f6:46:b6:c4:83:7d:fd:4d:13:68:43:ab:60:2e:74:d5:
         db:c1:fb:af:11:fd:bb:64:3f:74:2d:7c:4e:cb:e7:0b:5a:4f:
         6b:5b:5a:0b:88:f5:2a:2e:57:64:82:68:9c:eb:5a:e9:93:6d:
         41:a9:a4:4d:47:5d:f5:53:71:89:f0:41:33:5d:5b:0d:aa:00:
         83:56:c5:fd:7a:61:c5:54:3a:74:83:45:0c:b0:63:d9:87:7e:
         65:8c:f0:78:c0:4e:7c:25:3f:f5:09:51:bc:51:ef:7b:13:71:
         53:0f:6b:7e:c2:ba:c5:41:05:f7:40:12:e1:a0:91:2a:2f:2a:
         c2:96:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:49:12 2025 by rpki-client