Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5818204-ccf5-37e7-aac4-892d178f2aef.roa
File:                     e5818204-ccf5-37e7-aac4-892d178f2aef.roa (raw, json)
Hash identifier:          9EP8Kz3Ha2FLzD5MDg8ah1DpBjE8lC/rKeWx51z+B8U=
Subject key identifier:   3C:13:45:4E:E9:10:AC:94:84:91:81:2E:76:63:D6:8C:92:07:2F:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AC2E11B23434F0A260C671B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5818204-ccf5-37e7-aac4-892d178f2aef.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     393444
IP address blocks:        2001:470:38b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:1b:23:43:4f:0a:26:0c:67:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=56daade8-e2df-4c77-b8ff-20e9ee36964d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:84:f3:e6:4a:5d:53:44:ef:cb:3d:8a:c4:
                    f6:9e:d0:a2:16:e3:2d:50:14:73:b3:89:f8:28:61:
                    17:97:65:56:4e:f7:8e:6c:73:ea:18:e3:a9:f2:7a:
                    fa:96:d6:6d:c3:ed:4b:da:59:25:7d:15:04:71:34:
                    75:6b:ac:40:ff:d9:5f:3a:f8:1a:7b:c4:d4:f4:48:
                    ce:d4:06:86:71:51:c6:cd:4c:fd:98:23:c7:11:9f:
                    00:c1:ec:f5:82:35:b4:02:d0:1a:90:77:5d:79:23:
                    9b:ab:8c:b3:67:0c:f3:1f:07:bb:d1:94:58:28:ac:
                    36:9a:af:17:6f:db:97:8d:ef:ee:31:a2:e7:d4:da:
                    e4:7a:a9:7c:b0:14:fc:92:ba:03:7b:9b:34:07:c1:
                    1b:bb:8f:47:80:56:fa:28:65:38:09:94:98:b1:1f:
                    27:b3:77:8d:c2:97:af:39:e2:94:88:4c:2d:1c:a4:
                    d7:c0:ab:65:49:73:da:15:8c:66:ce:69:a4:df:5f:
                    7d:eb:65:e7:cb:35:42:42:66:3d:c7:e6:71:e9:34:
                    4b:94:57:4e:47:28:5f:2a:00:b6:43:e7:b4:cd:b1:
                    7e:db:c8:4c:e3:6e:b2:1c:e1:ec:97:60:f3:26:c8:
                    23:0a:07:6b:eb:07:2a:c8:19:2f:0a:61:93:84:2f:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:45:4E:E9:10:AC:94:84:91:81:2E:76:63:D6:8C:92:07:2F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5818204-ccf5-37e7-aac4-892d178f2aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:2e:d7:c7:84:6a:5b:69:cf:05:c4:7c:60:f1:39:e8:2a:
         71:67:22:08:19:f0:75:3d:db:c3:7e:7a:ed:c4:a5:86:f7:81:
         f0:a4:b4:8f:06:3e:74:14:d2:d9:3b:b4:20:56:18:d7:7d:89:
         f1:4b:e5:bf:c7:2c:46:ae:40:4f:af:9f:61:e6:53:45:90:a6:
         3f:f4:39:d4:61:c5:a7:d2:00:e1:92:0f:b1:6b:27:65:e7:74:
         ef:81:3d:90:59:99:19:56:08:45:59:62:48:50:78:5c:51:3a:
         34:3d:ec:14:47:3f:86:67:22:95:44:13:21:e0:0b:b5:9c:a5:
         3a:fb:1c:69:8e:a4:4f:f4:96:1a:55:b6:f7:da:cf:af:75:91:
         f6:1d:4b:46:68:93:8a:a3:b2:db:fd:47:ca:7c:94:1a:8a:ba:
         1f:5c:43:5d:80:fa:31:12:6a:ee:e1:71:3a:f5:8d:33:d4:6f:
         4b:d1:9e:d4:d0:82:d8:9f:b3:f1:de:1d:f5:00:ce:d3:b2:25:
         d1:62:f3:30:2c:b4:ce:ba:cb:cf:96:33:4e:b0:a1:59:34:1f:
         00:a9:0a:84:04:6e:d9:14:a4:5d:ce:3a:ed:78:ba:ee:55:0a:
         f5:85:71:34:72:74:1c:0e:6d:fd:9c:71:75:c7:bd:b8:3d:62:
         df:cf:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:40 2025 by rpki-client