Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa
File:                     2e54a944-730a-34d7-b327-ded75ab93832.roa (raw, json)
Hash identifier:          m3FDfF9vlGq03l4tG7tvl/pxTk5AMo3jVw7t7q5ydLk=
Subject key identifier:   DB:44:9A:F3:37:37:69:8A:42:C1:9D:AD:E0:63:41:77:D0:05:C8:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E30CB52B6326D21CFB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     44209
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e3:0c:b5:2b:63:26:d2:1c:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=e29d2a3d-6c55-4649-aa19-7bdc0aa26d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:4c:6d:3b:e3:01:b3:2b:50:c0:e8:6e:13:
                    5f:e0:67:57:f0:ee:15:8f:10:fc:ea:8d:e0:82:2d:
                    21:a2:b3:5a:63:7c:5c:bc:1e:02:1f:d6:92:6f:f4:
                    55:12:1d:77:1e:7c:5a:47:e9:d7:fb:07:f1:36:9f:
                    c7:4b:ea:31:b4:36:ce:5d:ab:73:cd:8c:06:ff:4e:
                    04:85:91:64:77:74:d4:c3:05:d7:da:ab:ce:e6:8d:
                    28:f3:f3:95:93:02:89:c4:ad:cb:12:bb:73:b4:de:
                    d3:ba:68:57:82:d8:9e:63:bb:6b:24:11:41:c5:03:
                    dc:2b:91:25:a7:47:e0:b5:c1:c1:be:ec:b4:f0:30:
                    d2:3c:2a:12:8c:62:7d:7d:38:58:24:a8:11:29:18:
                    5a:86:0f:0a:89:27:f2:53:0a:6e:5d:8d:0d:a1:0c:
                    54:2b:b4:db:02:ff:f0:24:9b:04:d2:d7:c1:8d:1b:
                    67:98:e6:9c:e3:55:60:6c:a8:b9:15:49:81:c4:69:
                    04:ca:ce:68:f9:8c:de:e5:62:c7:21:9f:f9:72:99:
                    68:bc:61:45:23:8d:28:b4:84:1e:cb:f1:e0:43:ed:
                    37:8d:68:9c:6c:62:67:97:79:04:73:26:fa:fb:e2:
                    2a:50:1d:cc:0b:af:3f:c0:22:49:3f:67:93:b7:8c:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:9A:F3:37:37:69:8A:42:C1:9D:AD:E0:63:41:77:D0:05:C8:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:33:87:6e:af:07:54:6f:46:7b:40:f0:32:04:3b:fc:e1:
         46:d7:e3:e1:8c:38:8a:c2:eb:2b:9f:af:9a:cf:fe:29:86:90:
         55:a7:bf:72:82:be:fd:d0:fa:61:6e:30:99:b0:6a:4a:a9:f7:
         63:57:d4:91:53:00:35:96:96:ef:fb:d1:c9:ae:18:a3:23:56:
         ce:b5:86:f0:87:54:0e:91:78:b9:f1:a8:f1:ba:a1:95:2e:6d:
         44:e7:2d:d5:ba:98:91:4f:d6:c5:da:7c:78:31:52:65:f7:84:
         52:75:41:ff:f2:f9:4f:44:ed:80:1c:4a:5f:75:83:97:6a:d5:
         96:aa:6f:75:df:e3:4d:6a:2a:06:62:c6:01:a5:4e:f3:72:34:
         c0:52:95:f9:ff:4e:f9:af:f5:59:e3:a7:97:ce:dd:be:fd:94:
         84:e8:19:c2:6b:e4:9d:d4:b6:b5:e9:ac:fd:f0:cc:d2:39:e3:
         ee:40:77:0e:e4:49:18:d5:75:9b:b3:85:92:1c:89:9e:2b:37:
         9a:52:c9:94:70:c7:96:cb:ef:75:3d:36:40:0f:9d:98:82:cd:
         1a:56:0d:48:f2:c1:a4:ea:52:02:56:de:29:2a:c1:2f:1a:b9:
         1d:17:52:4f:a7:ed:ee:59:42:cb:d1:21:e9:31:16:9e:ec:f8:
         70:71:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:35 2025 by rpki-client