Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0adcf064-dbde-3c0b-8c13-2eb77759379f.roa
File:                     0adcf064-dbde-3c0b-8c13-2eb77759379f.roa (raw, json)
Hash identifier:          Oo5mL9ixpMRBHB/E8Y5NQlAjNqAl9ayD7OiXB8p4J0w=
Subject key identifier:   C2:B6:A4:CE:53:12:7B:F5:6B:FE:98:20:02:89:3A:6A:B2:D7:B8:42
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849DB2A302405BC947FC02036E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0adcf064-dbde-3c0b-8c13-2eb77759379f.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     17025
IP address blocks:        2001:438:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:30:24:05:bc:94:7f:c0:20:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=c52f059e-cdc3-4cf1-a503-4c0a357e6d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:98:35:4d:f1:9b:cb:6d:a2:23:8c:9a:44:
                    41:4f:3f:11:d8:bd:4b:4c:b4:8d:7a:d0:3f:dc:43:
                    f4:11:58:77:a6:54:6e:85:5d:c0:50:23:77:ea:41:
                    43:a9:70:fc:d2:d9:48:30:10:94:3a:71:99:da:8a:
                    33:b4:56:82:c7:82:d9:25:cf:f0:15:83:41:16:33:
                    12:06:8f:e3:e9:4f:7a:8b:91:a5:a5:d1:44:c7:19:
                    dc:ad:60:b4:a3:88:81:83:ce:38:32:79:07:8c:ce:
                    7c:22:ac:2c:b7:e9:53:e1:f9:01:75:6f:d5:db:16:
                    c7:36:68:3e:72:a9:e4:88:b3:73:18:58:7f:45:75:
                    6a:4d:57:32:4b:1d:58:b9:d1:dd:6c:45:66:0a:2b:
                    65:cd:13:93:bd:94:d5:f5:c6:90:77:f5:1e:8a:94:
                    49:ed:6a:e5:d3:8d:d3:87:9e:f3:4b:12:b2:5f:42:
                    99:46:35:bc:38:b6:04:ec:0a:e3:fb:63:f6:83:df:
                    45:4b:34:7c:0a:4e:2e:2c:95:17:19:bf:69:26:4d:
                    da:1b:2e:82:47:ee:74:48:c9:94:be:f1:c3:3a:93:
                    21:eb:bb:b8:db:d7:53:f2:05:10:a0:9e:f1:f6:87:
                    64:e1:39:cf:f9:e2:39:60:61:22:37:3c:fe:8a:eb:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:A4:CE:53:12:7B:F5:6B:FE:98:20:02:89:3A:6A:B2:D7:B8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0adcf064-dbde-3c0b-8c13-2eb77759379f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:e6:8d:06:3d:7a:2f:b9:e2:f6:3b:70:fe:4f:4b:eb:e0:
         05:29:a0:6b:b9:b2:22:6f:4d:2e:50:65:c4:70:c7:1f:25:23:
         35:24:63:4e:a6:66:17:df:4c:07:fd:c3:48:d0:79:68:22:d5:
         2b:5f:ec:41:c9:5e:d4:a7:01:17:80:07:b4:c9:78:f8:ad:92:
         f3:8b:f0:1d:7b:f0:b5:15:1e:37:ad:5d:e0:26:1c:d4:48:94:
         a1:18:90:c2:a2:31:6c:7d:01:9d:50:e1:44:f3:55:0d:45:73:
         5d:51:6d:cb:75:07:1a:78:dc:fb:f8:fa:4a:aa:f5:30:e1:dc:
         24:49:fe:b0:9d:96:de:bc:1d:1c:2d:74:36:9f:b0:18:80:65:
         20:6e:77:f8:77:38:0a:a0:cf:08:1a:5a:42:58:ff:5a:18:43:
         6a:57:2b:b0:d6:58:a5:b6:ff:ea:83:45:f2:1d:33:c4:53:5a:
         4f:89:5a:47:bb:d5:45:b3:1a:d6:82:b7:a4:eb:43:4b:16:3a:
         8b:2c:66:6a:a5:8d:8d:3c:9a:a6:e4:62:06:58:05:e0:40:d6:
         9d:bb:4d:3c:87:0f:72:eb:bb:b6:2d:e3:56:21:3a:df:7f:9e:
         55:1d:4a:80:6e:43:36:df:b2:75:1e:75:98:07:79:86:47:d2:
         a1:33:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:30:56 2025 by rpki-client