Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa
File:                     a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa (raw, json)
Hash identifier:          gxBjlaBYLvm5TW5+EEPfYI6YORZWdShinC790uZ+P5w=
Subject key identifier:   97:B7:92:4A:3C:B2:31:7F:15:CA:1E:C3:CC:23:3C:5A:1C:3A:CA:A0
Certificate issuer:       /CN=ff58fb87-11da-4b05-b322-2070c2639fa7
Certificate serial:       010D0C9F43285849B844BB9B83ACEB3C7BB23A80
Authority key identifier: 02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa
Signing time:             Fri 02 May 2025 13:01:00 +0000
ROA not before:           Fri 02 May 2025 13:01:00 +0000
ROA not after:            Thu 31 Jul 2025 13:01:00 +0000
asID:                     40591
IP address blocks:        134.82.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:44:bb:9b:83:ac:eb:3c:7b:b2:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff58fb87-11da-4b05-b322-2070c2639fa7
        Validity
            Not Before: May  2 13:01:00 2025 GMT
            Not After : Jul 31 13:01:00 2025 GMT
        Subject: CN=28b1839e-12e8-439a-9b47-9740d1896965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4b:f5:23:b3:68:73:b8:1a:e2:e6:a4:24:44:
                    63:c2:d4:7f:3d:d8:16:4a:e8:8b:d2:f9:19:01:68:
                    4c:0b:30:18:ae:79:56:6a:3a:82:c6:4d:ab:73:f9:
                    d4:67:48:e1:1b:12:c4:2f:db:53:3d:4a:78:f6:45:
                    09:07:e9:5e:e2:5b:26:3a:2a:6d:ad:1d:dd:cc:46:
                    69:6c:1d:a7:97:93:50:ac:71:87:b4:f2:8e:1a:e1:
                    11:fe:a2:10:5c:a9:5b:48:61:1b:b7:f0:03:2a:13:
                    49:17:db:a9:9f:04:14:dd:56:67:76:e2:c4:94:75:
                    c6:bb:3a:24:91:6d:18:30:c2:15:00:36:75:58:ee:
                    be:78:ac:ee:ef:ba:a3:81:49:10:9b:c4:2b:40:ad:
                    a5:75:b4:b7:24:3e:4f:e9:58:b9:e1:b1:80:46:cb:
                    b4:ed:ee:73:28:16:42:da:66:fb:2f:11:fe:0b:3e:
                    ff:15:62:51:d6:e9:83:25:17:db:f4:ee:3f:c2:4f:
                    bc:2a:ca:97:96:f1:f1:d1:46:7c:1f:dd:5c:d0:fb:
                    2f:d4:40:20:2f:51:fa:02:18:ba:dc:3d:5b:e3:a4:
                    eb:e3:e1:78:8f:a6:09:15:bf:22:e1:6b:e6:70:9d:
                    55:59:12:72:67:03:47:b3:40:46:69:be:b7:d1:48:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:92:4A:3C:B2:31:7F:15:CA:1E:C3:CC:23:3C:5A:1C:3A:CA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/a640c3f9-4cf8-3ee6-b68b-df0f94b6678c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7/ff58fb87-11da-4b05-b322-2070c2639fa7.crl

            X509v3 Authority Key Identifier:
                keyid:02:1A:0A:17:9D:49:29:1F:8C:B0:63:92:C3:31:DE:DD:EC:EF:8F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff58fb87-11da-4b05-b322-2070c2639fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.82.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:b7:21:10:55:c6:3e:b5:50:ff:ff:d7:5a:68:98:cd:5c:
         0e:01:ae:21:37:7e:d3:32:54:42:35:77:47:60:d7:ed:b0:01:
         30:7b:52:54:60:92:33:8e:f0:55:b8:9d:48:c6:a8:c2:12:99:
         1e:04:7c:1e:31:ba:0c:bc:6f:0b:36:57:02:27:38:46:02:df:
         fb:6b:4a:03:f6:c9:21:3e:ee:c5:08:02:48:94:30:5b:dd:1b:
         03:4a:1c:87:ed:18:d5:01:f4:c5:a4:55:b4:89:e0:b6:35:4d:
         26:bb:30:58:aa:d1:bf:f1:5b:9c:41:73:67:0b:f7:2b:29:ae:
         1c:6b:d1:cc:a1:e9:95:db:ed:45:42:61:1c:ec:04:e5:f2:ab:
         5d:a8:29:6b:7f:76:95:80:8e:bc:47:03:1d:8e:ce:bd:51:2a:
         e6:63:ec:b8:aa:6e:17:8c:4e:c3:5d:da:4c:74:9c:a9:e8:8f:
         c5:f5:47:d9:10:04:33:0f:94:a4:aa:0e:92:ee:ed:a2:c1:31:
         5b:35:95:d7:f8:f2:b7:b5:d1:ca:a9:71:0c:40:04:2b:99:df:
         7f:2d:97:39:24:f0:38:6a:c2:53:11:46:93:ec:a9:02:4c:97:
         4f:fc:6d:53:c3:35:f7:a9:4c:ff:51:85:10:be:4a:c6:92:a1:
         b1:f3:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:09:09 2025 by rpki-client