Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
File:                     e50dcace-be5f-3f1f-9cfe-4047144e8682.roa (raw, json)
Hash identifier:          txPRfSAsuGHf2gLDo3C84yWG8RtAL13BMCXmqxo2X5M=
Subject key identifier:   DE:08:45:AD:39:14:16:FC:D0:57:78:7B:48:A5:00:4B:3D:40:0A:78
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584A1556A1576429718A9DC8A280
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa
Signing time:             Wed 04 Jun 2025 21:07:17 +0000
ROA not before:           Wed 04 Jun 2025 21:07:17 +0000
ROA not after:            Tue 02 Sep 2025 21:07:17 +0000
asID:                     16509
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:56:a1:57:64:29:71:8a:9d:c8:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Jun  4 21:07:17 2025 GMT
            Not After : Sep  2 21:07:17 2025 GMT
        Subject: CN=0c500b1c-f130-477f-9288-048044d278d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:d8:c2:7b:0f:e4:62:a8:5c:0f:bb:f0:87:
                    f1:43:36:3e:d4:85:d0:27:5b:3b:26:de:19:d6:0e:
                    39:0e:7a:7e:f4:1f:6b:a8:3a:8c:78:61:93:44:c3:
                    22:f1:4c:ec:5f:10:4a:dc:eb:af:2e:e7:b9:cb:bc:
                    6f:09:d6:f4:3b:f5:b2:54:5a:f3:6d:91:1e:38:05:
                    cf:b6:c6:7a:b2:7b:f2:44:c8:46:c6:3c:7c:3b:1c:
                    02:74:54:7f:13:ba:b9:ad:40:b4:60:96:4f:63:69:
                    26:73:84:17:e2:40:52:f3:35:c9:e5:ca:07:78:46:
                    34:74:c5:80:2e:4a:72:84:bd:37:9e:f0:91:65:28:
                    30:db:bf:b1:0f:64:40:14:62:e0:bf:09:61:21:0f:
                    73:06:3e:3d:21:1e:21:ea:e8:9e:6a:b2:2d:3a:f5:
                    3f:bb:3d:a4:ae:7e:13:67:1f:1e:dc:ba:3c:39:cd:
                    61:31:12:cd:6e:3a:97:a3:72:e5:ab:ab:ae:20:cd:
                    f1:07:61:9a:19:2c:c3:e7:ee:59:f7:dd:8c:13:f4:
                    50:da:c3:5d:65:08:4a:d4:0d:59:55:ff:e9:69:9b:
                    8c:dd:dc:b6:d3:9f:f2:6b:7d:85:c9:ab:04:0a:e0:
                    5e:67:b8:a7:31:02:02:e3:90:57:5a:c5:5e:7d:e2:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:08:45:AD:39:14:16:FC:D0:57:78:7B:48:A5:00:4B:3D:40:0A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/e50dcace-be5f-3f1f-9cfe-4047144e8682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:68:b0:8f:7b:79:18:f1:e2:08:31:d6:0c:2f:4e:6c:dc:
         ce:77:33:c1:4f:0c:c1:57:fe:ef:d7:dd:75:58:38:cc:7f:83:
         fb:13:e3:3f:07:93:a5:d3:c1:0d:16:5c:2c:51:8b:b1:c5:85:
         57:45:2c:6a:d9:34:7e:7f:84:98:bd:c5:4b:38:ab:8b:f7:ff:
         6e:f7:82:01:73:51:21:fd:ad:db:cc:83:63:6d:c6:c6:20:3a:
         b2:58:06:5e:41:77:f3:aa:e4:ac:ad:1b:aa:fa:cd:8d:9a:a2:
         b9:f3:da:a5:8c:ba:ba:5c:f2:4b:3f:ae:51:dd:d9:41:33:24:
         fb:b8:32:1b:04:ef:1e:76:bf:fa:3e:38:0f:14:ea:ee:36:34:
         88:27:07:51:6f:65:61:aa:7f:7f:1f:0b:aa:b5:a8:11:cd:3c:
         a3:79:d7:95:8e:d5:8b:10:d1:d1:a8:a1:a0:43:82:41:12:56:
         2d:32:50:63:a4:0c:df:ac:a5:20:22:fe:a3:8f:ff:13:57:b4:
         c0:f4:e4:70:fd:26:d6:5e:2b:30:7f:d7:fd:5d:fc:f9:5d:da:
         ca:4c:c2:da:2e:a3:ac:32:60:42:31:fa:25:69:be:4f:33:d2:
         6d:4f:74:de:59:93:6d:0b:1f:d0:4a:ac:88:e1:05:3a:96:8f:
         12:73:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:46:40 2025 by rpki-client