Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
File:                     02510d32-350c-313e-936b-3ebdbbc8f953.roa (raw, json)
Hash identifier:          a3Rd8sk7Sg44cJ3fS+ccmKJz5vv2U8wILqbF/+8kj/M=
Subject key identifier:   39:34:FD:FF:12:EB:C5:85:2A:BC:9B:57:04:22:F4:77:DB:4B:61:DF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D2791B81B707D60E6850
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     401117
IP address blocks:        2001:470:323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d2:79:1b:81:b7:07:d6:0e:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=d6ec897c-d6e1-4354-b264-a469b0538695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:0f:eb:97:e6:a8:10:c4:aa:d1:c9:37:26:
                    00:ec:c9:22:f2:e6:a7:4f:8e:8e:4b:19:a0:21:b2:
                    ba:43:87:b0:d4:9a:a6:16:72:d0:12:25:51:ee:65:
                    e0:02:99:1a:9b:71:e7:7d:1a:1e:32:35:f0:73:0a:
                    4a:c1:e1:bf:ce:e1:5c:cc:4e:9a:e4:69:d6:78:23:
                    1c:01:2f:5a:84:2b:40:dc:b4:f5:f0:69:52:b4:a7:
                    54:e9:42:b7:97:3f:5b:c4:ca:22:48:05:fd:dd:dc:
                    34:95:66:02:a4:72:aa:79:fa:98:cb:8b:df:2e:05:
                    f0:cb:e2:be:25:79:c3:eb:ed:25:60:ee:ab:98:27:
                    f1:ab:db:72:62:2a:fb:bd:d0:87:21:b3:91:27:f7:
                    c1:1c:75:19:1e:f9:8d:41:d2:5a:fa:c2:44:c6:05:
                    16:db:70:98:f3:9e:a7:6c:dd:ff:e3:50:e0:f2:9b:
                    fb:ef:8f:df:05:e1:20:cf:e2:4e:d3:d6:bc:d6:97:
                    f8:f4:8c:7c:62:34:7c:fe:49:67:02:af:a3:8b:aa:
                    64:93:c8:c4:d5:9e:01:19:e6:ba:c2:00:57:ab:37:
                    ac:50:f5:ba:34:3f:62:f7:a6:10:be:56:89:7b:fe:
                    67:20:7e:80:c1:b4:bf:9f:86:2a:78:de:a5:3f:93:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:34:FD:FF:12:EB:C5:85:2A:BC:9B:57:04:22:F4:77:DB:4B:61:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:2e:98:87:2a:62:f4:87:3a:00:6e:cb:19:3e:18:bb:4a:45:
         ca:3e:c4:42:08:69:d8:3c:2a:cc:ff:9a:47:94:30:e8:bc:a5:
         05:5c:05:a2:b4:b4:ea:e3:a9:50:0d:cd:a7:e9:1f:72:6e:40:
         e0:1d:26:14:98:40:91:4c:2c:2b:89:1c:b3:d0:c4:9d:46:ba:
         fb:19:9b:1b:cc:41:c0:4a:bf:72:7f:b0:3e:1e:b9:76:30:bc:
         41:d0:b2:ae:2b:e4:6a:0a:a6:fc:d2:c6:d3:be:ac:70:ac:67:
         0c:b5:6b:14:06:52:0a:18:34:7b:75:63:0e:f7:7f:05:63:93:
         92:e0:42:86:96:d6:c8:a4:34:58:9e:cf:1b:7d:66:f2:ea:05:
         7e:45:6d:cf:98:45:12:d0:0d:23:26:5a:1a:5e:d3:28:3f:4d:
         05:3e:49:0f:b5:7d:a3:4c:7f:43:94:8c:a8:41:de:00:1b:22:
         37:f4:15:d7:d8:01:f9:04:0c:f8:00:87:84:7e:ba:14:97:6b:
         08:4b:1c:b6:ac:b9:84:70:d5:d6:c2:6a:64:9c:3e:8c:b9:f0:
         e2:05:09:03:ec:45:07:f2:a9:c2:bf:22:eb:bb:6c:a6:46:51:
         c3:bc:ab:52:14:1e:bb:ba:17:75:a0:4c:14:b4:0f:0a:17:b7:
         71:1e:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:15 2025 by rpki-client