Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
File:                     2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa (raw, json)
Hash identifier:          0qJSwoO3IETnhDB9hJoxDQDdSWq4axyLlKQBol/As3o=
Subject key identifier:   2A:32:50:F5:F5:2C:05:90:3D:A2:4C:AE:D2:A4:EC:0F:C8:34:ED:8B
Certificate issuer:       /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
Certificate serial:       010D0C9F4328584A1035459F68B89602F7577E00
Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     399519
IP address blocks:        172.82.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:45:9f:68:b8:96:02:f7:57:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=a8ae0a74-5c57-4bcd-948a-8b6191788862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:99:29:a7:5b:c7:ed:79:21:53:2f:b8:09:
                    f4:9b:10:86:23:df:11:96:f7:93:5a:c8:77:5e:fa:
                    a7:77:f0:ad:a0:ed:e6:80:4a:3e:ba:95:96:a0:33:
                    c0:41:29:ce:d7:1c:58:cb:ff:e5:8e:84:b3:f0:6b:
                    39:3a:4e:e9:7c:39:6a:cc:34:62:d6:08:8b:3d:ef:
                    7c:f2:8e:76:43:ec:ec:29:8d:8a:b7:7e:54:9e:3a:
                    bd:e0:25:8f:6e:86:79:47:55:fe:ee:dd:f8:9a:ca:
                    de:47:0d:a9:28:74:15:e8:fa:2d:21:9a:a8:e6:14:
                    75:d5:16:aa:fe:54:4e:6e:88:46:3d:69:70:5c:e1:
                    70:a8:45:96:04:d4:88:da:2d:1b:78:d9:fe:40:e2:
                    bc:36:a3:5a:6a:6a:a4:ca:5d:e2:73:88:95:58:78:
                    15:74:42:da:42:d1:ca:93:30:c5:ac:36:f7:16:7a:
                    3f:2d:a9:2b:45:b2:07:32:8d:c6:db:43:04:6a:d6:
                    27:d6:09:2c:73:e2:cf:52:50:4a:1c:8f:f0:11:ca:
                    81:08:ad:7e:46:bf:d4:38:d1:64:db:8b:2b:e4:3a:
                    e4:a9:e7:06:50:5a:ce:95:95:cd:56:f6:b0:ae:b0:
                    aa:05:bc:74:a5:b4:81:4f:88:07:b4:fa:98:e7:b7:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:32:50:F5:F5:2C:05:90:3D:A2:4C:AE:D2:A4:EC:0F:C8:34:ED:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl

            X509v3 Authority Key Identifier:
                keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:6f:7d:4c:3a:34:b0:f8:30:f9:23:62:be:21:f0:dc:55:
         40:4a:f2:bb:f4:e5:3b:f4:e8:71:4c:3f:83:77:f0:37:c9:c4:
         a6:cf:15:d8:d7:a4:bd:70:9a:94:69:57:f0:74:8a:3c:32:c5:
         f8:35:b3:e4:25:c0:41:09:fa:54:a8:7b:0e:01:50:cf:eb:b9:
         e1:f6:c7:71:2e:3b:28:cf:cf:53:23:b2:dd:ab:81:ed:c6:40:
         d0:b1:7e:bf:b9:42:3e:4e:c1:92:f9:71:b5:2d:40:67:18:ad:
         8d:7a:48:3d:55:63:3e:48:2e:fe:ee:b1:35:4c:7e:0b:9b:9a:
         05:2e:0e:ca:84:23:48:0c:82:6a:01:ff:ce:94:57:02:f2:94:
         6b:8e:5d:9d:b7:bd:60:f5:01:fe:f7:68:14:84:de:bd:b0:a2:
         3e:0d:aa:98:d2:47:23:57:60:6d:29:c7:ab:0e:49:74:98:c1:
         75:24:39:37:ec:67:8c:f4:15:9f:eb:f3:d3:1a:18:d2:bd:c2:
         24:95:0c:9c:3e:bd:63:0a:a9:62:0b:22:7d:90:69:62:9a:5c:
         cb:be:69:fc:ab:5b:4d:56:92:69:30:29:55:33:21:78:8e:de:
         cc:f7:47:31:06:6b:62:6e:22:ab:1a:56:e6:9d:87:60:6f:94:
         6a:77:04:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:07:05 2025 by rpki-client