Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dca43d6-955f-3712-bd3a-db74fe197c94.roa
File:                     4dca43d6-955f-3712-bd3a-db74fe197c94.roa (raw, json)
Hash identifier:          x2QYjS8p24zeePa3Wl5X8Tg2Bn4kkGKqGAW58UaibW8=
Subject key identifier:   9B:02:08:F4:F9:D6:C2:64:EB:49:07:3D:5D:A0:C3:99:D8:D3:BF:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB44E3CB620A0CFE51FA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dca43d6-955f-3712-bd3a-db74fe197c94.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     26073
IP address blocks:        2001:470:130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b4:4e:3c:b6:20:a0:cf:e5:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=482711b6-9956-4d51-91f6-04ff5625520e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:90:0b:64:76:a8:c0:04:85:01:ca:4c:ec:
                    b7:0c:e2:d2:66:e6:16:cc:18:20:17:d9:46:ea:ee:
                    a9:02:c6:a8:44:7f:86:a8:d3:b8:4b:16:51:2a:32:
                    71:21:0e:36:6e:aa:d3:5d:85:fe:d7:24:41:70:8a:
                    5d:86:95:e2:b2:a0:8d:03:be:cd:9e:e7:32:9e:ef:
                    d9:ce:26:88:97:9f:ff:4e:94:8a:9b:73:39:5c:df:
                    23:b9:ea:89:b6:53:bb:b3:55:60:a0:65:87:f9:59:
                    c3:c0:b3:15:d4:45:f8:4a:fe:60:81:41:11:8a:63:
                    c8:64:6c:4e:87:d7:46:23:28:4b:b7:44:0e:22:7c:
                    c0:f3:b9:2a:17:82:68:31:5f:41:16:e7:01:bf:bb:
                    12:34:f9:17:79:c4:d4:74:21:9f:af:ad:c2:27:8d:
                    91:6a:2c:3b:58:e3:be:4e:52:70:b9:1b:da:a3:62:
                    45:d5:85:26:ee:20:bd:08:a3:fa:6d:be:73:05:4c:
                    5b:bf:a7:24:80:d8:c5:13:5a:f6:27:67:a3:53:45:
                    31:a4:54:2c:fa:68:7f:63:52:ed:6c:48:7f:87:c0:
                    93:b8:85:b7:ea:4b:de:c4:bf:d3:02:fd:e9:c9:25:
                    8f:86:5c:20:7e:c8:2f:77:c2:0a:e6:93:9b:f9:c2:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:02:08:F4:F9:D6:C2:64:EB:49:07:3D:5D:A0:C3:99:D8:D3:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4dca43d6-955f-3712-bd3a-db74fe197c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:64:41:e4:d4:cd:15:78:4f:f1:01:3a:05:40:df:92:45:
         87:18:c8:b4:54:a7:be:fd:ce:ea:ec:13:d2:9e:44:fe:0a:92:
         35:47:bb:1f:96:2c:b9:36:a1:d0:e7:fa:7a:04:66:18:d2:cf:
         04:dd:52:cc:71:ec:7c:da:e4:90:c8:cb:d3:ea:eb:24:0c:fe:
         6b:46:fd:e9:c7:39:57:37:ce:20:ca:52:6f:44:1d:ca:8b:8f:
         5c:f6:cd:09:90:27:0e:7b:7e:b3:ca:30:2b:eb:af:50:8d:4a:
         82:34:45:e6:ec:9e:7f:26:ca:38:9b:2c:ca:09:6f:75:cc:06:
         b5:f6:de:bc:26:d0:87:a8:2b:42:7d:1a:d6:fe:96:10:bd:c4:
         cb:e7:7d:65:da:86:2c:d6:6c:d7:d5:fe:d5:b1:48:0c:cf:57:
         b4:20:c7:e3:4f:9d:d5:80:d9:82:f8:f0:b9:bb:29:0b:0e:66:
         9c:20:4b:73:71:c0:20:ee:11:b6:11:47:23:c2:63:49:dd:b9:
         59:8e:01:6e:1b:3b:bd:42:76:23:c1:d9:c9:f0:09:44:b8:85:
         45:79:cf:e9:91:4e:03:82:b0:9b:d0:5b:14:b5:dd:17:9d:8f:
         b4:54:51:d4:46:f1:7f:eb:35:96:18:77:64:0b:bd:84:f0:56:
         ae:83:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:13:50 2025 by rpki-client