Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File:                     b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier:          VZx2MCI+3eFvitBrTD4EinpqFxsR62HasG7XwAbqjVk=
Subject key identifier:   E1:87:A5:F8:AC:93:B2:E5:18:FD:ED:A6:7F:98:C1:26:41:B5:0A:FB
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F43285848BE863145BE4D71C6CFA36400
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     4185
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:31:45:be:4d:71:c6:cf:a3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=dbed877a-d36d-4d7a-a20c-8db723c5da38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:bb:f2:50:c7:d1:54:de:ca:24:b6:12:1f:
                    52:c3:3e:bb:fc:fa:7d:27:81:e9:97:e5:e4:d2:96:
                    c0:f3:50:82:c5:ee:9d:af:eb:7a:66:ce:22:ed:ec:
                    2f:23:1a:22:de:9b:f7:8e:e9:6a:52:57:6f:b0:29:
                    1a:b3:56:e8:db:0b:9f:10:bc:8e:8e:5e:5b:3f:ad:
                    8f:1d:06:d9:9d:2b:c2:11:ee:a6:01:fb:be:cd:cf:
                    bf:ed:fe:1a:0f:11:b4:64:59:f0:02:ff:90:01:26:
                    a7:8d:ce:f7:fe:e4:38:47:eb:b3:1c:82:22:b3:80:
                    df:b7:3b:4e:a6:7b:e2:a7:e0:0a:8c:b5:1e:81:2f:
                    5d:fa:2a:2c:63:c6:a0:6a:10:9a:fc:f1:cf:3b:86:
                    96:de:77:57:66:11:aa:76:1e:a2:87:51:b6:96:24:
                    19:70:17:e3:f7:38:51:70:28:67:f3:de:5a:82:58:
                    65:de:07:57:72:ef:5f:16:96:f8:b6:1e:71:79:7d:
                    2c:11:9a:dd:4f:6c:01:72:5f:bf:41:7a:51:06:9d:
                    28:cc:c9:bf:96:62:86:da:51:f5:69:24:84:7d:b1:
                    b9:2e:82:de:f2:6b:3c:10:84:ea:51:58:aa:9a:21:
                    bb:59:d8:0e:15:6d:f9:fd:a8:01:1c:58:17:0a:21:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:A5:F8:AC:93:B2:E5:18:FD:ED:A6:7F:98:C1:26:41:B5:0A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:88:2f:48:10:db:10:dd:d3:31:be:d6:1d:b0:20:b0:ed:
         21:04:5a:29:56:d1:12:f2:c5:53:01:68:3d:7a:14:be:0d:5d:
         67:71:82:ae:5b:f3:6d:37:12:d7:50:dc:37:07:23:d9:be:78:
         48:08:9a:18:d6:f5:8e:88:a1:19:b0:98:54:e9:8a:1f:49:37:
         fc:50:a8:a9:e9:41:9a:bf:91:39:e0:b8:7b:59:af:27:16:a5:
         ea:4e:18:8c:44:e9:5c:4d:98:88:d2:29:41:1b:61:07:8c:93:
         20:1b:6a:13:ff:fe:d4:ab:1a:28:07:4e:43:8c:55:5c:2f:95:
         16:68:16:7d:c2:21:e8:cf:45:25:02:50:e5:ba:fe:9f:8f:bf:
         39:e9:60:1c:3c:4f:b1:ea:ce:9f:b4:58:53:e8:f2:d4:13:e4:
         6c:46:8d:e4:73:54:6f:5e:dd:9e:ff:b2:f4:89:51:fa:37:67:
         ec:09:04:b5:32:dd:2e:47:ae:5b:02:ca:5c:ec:25:12:44:09:
         d5:bf:70:c7:99:5b:56:be:8e:0f:03:09:db:59:a9:5c:d0:3a:
         81:51:d1:ae:4e:50:56:96:aa:a2:51:c4:af:3b:f4:a7:22:6f:
         fa:3d:fd:60:db:d8:bc:a2:05:5a:1c:40:c0:ea:2f:30:eb:c4:
         39:1b:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:00 2025 by rpki-client