Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa
File:                     0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa (raw, json)
Hash identifier:          VMBSQDbrdECHl2tndwJ2GWVm1xhYx0UvBywv+aqzU2k=
Subject key identifier:   00:D7:11:F7:10:F6:F4:29:E4:2C:9F:89:86:EC:F2:B9:19:AF:50:8D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE518CCDA24355FBB5200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     48422
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e5:18:cc:da:24:35:5f:bb:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=35ef5841-ff00-4ab0-90bb-9bca5c8fa967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:e3:ee:a7:cd:3c:eb:66:77:0f:ec:02:5e:
                    6e:2c:37:b9:cc:45:8e:74:c5:e4:9b:b4:a5:ec:76:
                    e2:4d:8b:b1:ee:29:84:7a:3a:86:90:2e:33:8f:ee:
                    ed:87:6a:18:c3:46:44:51:69:7d:f9:24:87:77:30:
                    e6:a6:60:9c:8d:80:95:04:2b:05:a6:fa:d7:66:8d:
                    99:c6:0d:c9:21:77:ef:fc:b5:5f:2e:8a:89:36:9c:
                    75:e0:0b:6a:6a:6f:a5:26:d3:d0:a4:7e:01:47:72:
                    d4:a9:dd:db:d5:2c:73:72:e8:20:fd:e1:b9:ed:34:
                    0c:a4:02:e7:8b:f5:e0:50:98:7b:c2:ea:23:2c:f5:
                    29:46:67:fd:e2:18:bf:65:32:d0:9c:bf:77:a0:18:
                    5c:c1:05:8e:6e:87:e7:da:eb:3c:cc:48:11:32:f7:
                    d5:5a:f7:1a:47:7d:93:33:af:12:f9:35:6b:1b:93:
                    84:7b:4d:67:6b:02:2c:72:06:6b:ea:be:3c:22:79:
                    7c:ce:e1:8b:34:41:a3:dd:4d:a1:dd:e7:3e:7e:1b:
                    b8:bb:ff:c3:a5:c6:76:12:9f:f9:f1:cf:07:70:5d:
                    ed:90:a9:35:5f:c8:b7:43:59:17:55:72:28:72:23:
                    8d:a6:07:f2:44:8d:12:d9:a9:23:12:89:84:c5:bd:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:11:F7:10:F6:F4:29:E4:2C:9F:89:86:EC:F2:B9:19:AF:50:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:42:8e:61:b9:d0:83:6d:09:ee:1c:97:62:9c:d9:56:1b:17:
         d7:4a:99:9f:6d:25:f3:3a:4d:cc:b8:e7:7a:fc:f4:d9:40:43:
         68:23:05:60:73:8a:5e:63:a9:51:44:82:d0:58:0c:b7:f8:ab:
         2c:74:d7:90:8b:84:86:e6:54:25:a0:fe:68:0f:46:24:1c:70:
         dd:e2:a0:0f:2e:d0:a3:5e:f1:66:b7:ba:8e:8d:a7:6e:ec:2b:
         8f:cb:8c:85:08:69:c8:2b:a6:3b:1b:ef:2d:5c:13:b9:8d:30:
         f2:51:90:d4:11:23:5a:a0:aa:ab:58:28:b8:55:a8:d1:ba:f0:
         af:e5:f2:96:98:e4:0c:e9:d2:be:30:54:5a:64:71:6e:21:6e:
         d5:20:de:30:53:c0:e0:b7:f5:c3:0b:63:44:8b:af:04:7a:7f:
         f5:ba:88:df:bf:7e:84:bf:8f:2c:b5:8d:48:6d:ea:55:e8:0d:
         96:80:76:a4:c4:02:18:64:04:af:66:b7:d6:59:a3:95:c8:08:
         1a:4f:60:6c:53:93:a9:83:96:66:61:1b:13:1d:8e:18:12:97:
         58:56:b1:e8:47:9b:73:69:b0:7f:26:0e:e2:15:d1:b8:af:79:
         ad:7f:69:c5:5c:eb:8d:9d:86:73:9a:e1:15:54:5f:c6:6a:52:
         0a:3e:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:26:24 2025 by rpki-client