Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          1o2WQkXEEzUzksC9rRbJKbusUlMxyJTulQpZzQY1pus=
Subject key identifier:   08:B0:8A:A3:FF:E3:68:D4:4B:44:D0:B3:9F:6D:7A:44:0D:14:28:26
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285849CE9A45023CEFC7F8319EFA00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:45:02:3c:ef:c7:f8:31:9e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=d424ee23-4158-48c4-ad7c-18cbca436ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:e6:21:35:01:4a:dd:6e:5c:52:1a:11:2b:
                    6c:7f:94:3e:79:0f:41:23:2e:b1:c0:31:7e:62:29:
                    76:96:07:d2:61:63:64:07:53:aa:ad:4b:49:67:1a:
                    f8:08:3e:a6:db:bb:29:ab:20:72:0e:d4:fd:f5:2f:
                    09:b4:9d:3b:40:ea:d7:a7:d9:a8:29:ad:dd:92:1c:
                    ee:23:c8:04:2d:f2:4e:82:bc:ad:7d:d1:01:ee:eb:
                    8e:ba:b9:ac:8c:b0:fa:c6:36:94:c7:dd:1a:89:b9:
                    df:46:79:cc:d4:7f:10:6d:10:c1:c7:1a:78:8e:67:
                    e9:2d:5c:2c:21:0e:55:31:15:7d:d3:63:fa:e3:5b:
                    e9:a0:0a:11:45:d9:bb:8f:8e:1c:55:86:6e:04:ef:
                    c9:a2:18:96:4d:d8:52:c2:4c:1f:c8:d1:9b:f1:28:
                    7b:6f:4d:b2:ca:f4:2b:8c:24:c5:82:ea:e3:d7:d7:
                    5b:ef:bc:7b:f8:ee:01:30:a8:11:9d:3d:b7:4d:bf:
                    75:1e:a5:07:5a:1f:7c:79:c5:2a:b0:e1:9d:64:43:
                    5a:11:86:35:5a:8c:c3:72:89:2a:3a:2f:56:68:c8:
                    7e:95:4a:e4:71:cd:3d:86:43:63:be:46:b6:c5:5b:
                    37:a9:eb:37:20:a4:81:c2:31:3b:fa:30:53:da:e2:
                    c4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:8A:A3:FF:E3:68:D4:4B:44:D0:B3:9F:6D:7A:44:0D:14:28:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:52:8b:3e:f9:58:f3:cd:b4:82:5d:b7:1f:9f:c4:7e:14:c3:
         3c:20:a2:b1:39:da:44:bd:54:3c:5c:b0:e1:39:e2:f5:1e:67:
         be:f3:10:20:8b:9c:e4:4c:83:8f:82:a1:e0:54:ae:2f:8a:3c:
         42:30:c1:73:0b:35:bf:92:ac:41:60:61:c4:86:43:85:f1:bd:
         70:42:d1:a1:cd:f9:ee:66:de:b5:31:d4:0a:a9:d1:87:95:0f:
         a9:dc:c4:67:68:c6:46:53:eb:a4:4a:eb:6e:a2:c8:75:90:9b:
         44:00:20:61:86:28:a1:54:f9:36:7a:d4:1b:dd:76:50:43:c2:
         32:19:f2:c0:67:fa:79:cc:5a:56:b8:b0:00:9d:01:57:ea:65:
         4c:37:f0:73:e0:f4:23:f3:df:01:98:d7:3a:88:65:04:6b:50:
         63:34:03:c0:11:eb:a2:98:81:36:12:84:1d:d9:57:cc:83:0e:
         ad:7b:99:ad:d2:10:3e:84:b7:c8:47:54:c4:34:ea:50:e2:53:
         a4:9a:03:0f:2d:05:4d:55:bf:d5:94:d5:32:8b:2d:6c:db:9e:
         10:f4:5d:f0:06:e2:58:a9:29:1e:f0:d4:e1:bc:4b:e2:9e:e3:
         dd:58:99:b0:ef:7e:b0:f1:31:a5:72:ee:18:29:f1:33:5d:c4:
         41:8d:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:24:03 2025 by rpki-client