Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa
File:                     23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa (raw, json)
Hash identifier:          cuyBdsUA9rjtbO3eX11Kr0Fwt7Gyl+8j4Uo4bUfIvSA=
Subject key identifier:   DF:D9:D0:8F:87:4E:31:F2:D6:AC:62:04:A2:CC:03:34:17:2F:2A:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A1895525BC8E54DD7361A9900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     397270
IP address blocks:        2001:470:33d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:52:5b:c8:e5:4d:d7:36:1a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=2dfac387-6be7-4e87-a585-abbd8eabea79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:4c:9a:58:35:1d:0c:0d:3b:e5:2c:90:80:
                    f3:0c:ad:05:50:68:7e:50:63:91:c3:4a:b0:f1:e7:
                    c3:3d:f7:1c:bf:bf:31:ea:f7:77:3c:d3:14:1c:9f:
                    ca:26:c0:08:c7:b4:74:7d:1d:ce:d5:96:c6:33:53:
                    af:66:b8:35:0b:49:3c:8d:79:a8:15:95:d0:d1:f3:
                    16:22:91:30:c6:f6:ca:6c:fa:81:d1:0c:0f:ae:4e:
                    6b:20:11:0c:6b:c2:9c:6a:c4:c9:f1:bf:50:b8:4c:
                    82:12:c0:0a:c5:89:8d:fa:fd:ad:b8:5c:8f:aa:9d:
                    a4:0a:5d:95:bc:4c:84:fa:17:0f:9e:c8:27:6c:d1:
                    b8:28:59:86:15:53:2e:3b:5f:65:9b:bb:19:21:53:
                    38:f6:d2:e4:bd:76:26:c0:44:de:c7:d2:46:1c:f7:
                    3b:9b:34:ec:66:58:91:3d:40:ba:ed:10:86:75:80:
                    f9:68:40:60:d9:50:5b:03:76:48:83:08:ed:27:81:
                    3a:7d:37:a0:cf:37:dd:02:72:c1:c2:0b:2b:15:5b:
                    a3:38:6a:93:17:ef:7d:4a:8a:99:8f:11:6e:8f:ff:
                    b0:b3:44:21:14:d0:41:36:14:26:11:75:71:ba:65:
                    9f:c0:51:85:54:4c:a8:99:fc:42:a0:b8:da:25:66:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:D0:8F:87:4E:31:F2:D6:AC:62:04:A2:CC:03:34:17:2F:2A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23a78174-e8dd-3e98-8677-8ee79bd66ff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:33d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:a5:6b:62:ac:30:0a:c5:ae:22:98:2d:cb:6d:ca:3a:b2:
         72:96:54:80:a0:c0:c0:92:31:91:9f:1e:a5:d4:89:54:71:30:
         4b:61:c0:88:77:13:f5:2c:99:28:ca:71:75:fc:5c:8c:5b:6e:
         2b:c5:8a:d8:ea:26:4d:5d:4b:1c:ca:37:14:76:3b:7c:f4:1b:
         1e:ca:91:93:a9:1e:8e:43:18:2d:de:d9:5a:e8:2b:35:18:01:
         04:ef:ba:5b:38:5b:ed:fd:b4:ed:77:ec:c2:c4:0b:c7:30:4d:
         94:c4:55:cd:1a:70:7f:6f:c6:92:7b:d3:c0:07:43:1f:44:e5:
         3a:66:61:6a:3f:f5:d3:49:44:16:72:f8:f3:af:70:3c:1e:5e:
         43:38:9e:ec:83:54:97:f2:ec:18:89:68:56:a3:c0:2e:09:2e:
         e6:c5:28:91:84:9a:c5:b3:9e:d5:13:39:b8:ce:e0:71:b6:c5:
         63:a0:ed:5a:58:f7:b8:3d:2f:3c:62:90:3d:fc:50:98:85:66:
         66:d2:3b:e9:7e:c2:03:eb:39:4f:1f:22:11:5a:2b:d1:e0:cb:
         6f:51:b9:de:ec:98:a6:93:5c:4e:56:c4:66:f9:bf:25:cc:1d:
         00:5e:ab:df:2a:83:47:26:bd:ed:13:45:4c:af:d2:27:2a:e7:
         23:96:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:25 2025 by rpki-client