Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58803d7f-c167-33c4-8107-c04326ac56e8.roa
File:                     58803d7f-c167-33c4-8107-c04326ac56e8.roa (raw, json)
Hash identifier:          sy6+cZsq4C5q3dBqCDCX8egYFooSGxXFcmwSS1jpG4o=
Subject key identifier:   07:8B:64:1A:92:D4:5D:47:17:48:93:4C:F5:9E:CD:4A:3B:83:DE:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A64043F2C34C2622BB5A0E080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58803d7f-c167-33c4-8107-c04326ac56e8.roa
Signing time:             Thu 03 Jul 2025 01:30:09 +0000
ROA not before:           Thu 03 Jul 2025 01:30:09 +0000
ROA not after:            Wed 01 Oct 2025 01:30:09 +0000
asID:                     209252
IP address blocks:        2001:470:481::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:64:04:3f:2c:34:c2:62:2b:b5:a0:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  3 01:30:09 2025 GMT
            Not After : Oct  1 01:30:09 2025 GMT
        Subject: CN=d56c2c5b-e6e6-4af9-9bd2-da98a7f8859a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:76:50:20:bb:1c:41:0f:34:89:64:fb:d7:
                    16:c1:de:9d:cf:a6:24:60:f6:27:87:11:70:f0:30:
                    7d:b7:d0:b1:bc:8d:de:0c:ba:5f:86:42:c2:bd:47:
                    de:99:f4:a6:94:0f:7c:35:cd:61:af:61:d1:3a:53:
                    1c:d5:14:12:15:38:a6:d9:cb:b0:f0:d9:09:51:7d:
                    bf:5f:79:b9:be:24:73:5a:38:74:59:e0:f1:05:0b:
                    83:46:77:1e:b9:b0:01:22:85:1b:ec:c4:f5:ca:a9:
                    c9:dd:ab:d3:eb:b8:49:18:18:7b:de:18:f3:c3:08:
                    1a:94:11:14:78:8d:92:10:eb:ce:14:f5:a2:7d:b1:
                    69:a3:86:db:37:23:1c:91:8d:17:8c:6f:cc:36:f7:
                    8a:0d:79:bb:92:32:f4:8a:e0:7d:6e:00:d4:ec:b8:
                    19:45:16:80:da:29:32:1f:53:45:73:59:73:28:ba:
                    7f:46:73:b2:dc:f5:9b:5b:18:58:4c:4f:c2:1e:07:
                    96:89:53:15:db:7a:70:d1:f1:f8:08:79:18:be:6d:
                    3f:f2:f1:1c:f8:e8:77:21:06:bc:f4:cd:44:be:34:
                    f6:24:9f:6c:2b:e3:dd:b7:de:71:bb:27:6c:4c:87:
                    16:94:44:cc:a6:11:5d:59:06:2a:63:a6:17:7c:57:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8B:64:1A:92:D4:5D:47:17:48:93:4C:F5:9E:CD:4A:3B:83:DE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58803d7f-c167-33c4-8107-c04326ac56e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:481::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:bd:e6:09:b4:91:af:24:2c:81:06:bb:ef:c9:f0:95:ae:
         21:bd:6f:9e:84:6f:dd:3e:86:39:ad:88:a5:4d:37:89:b2:25:
         27:d3:88:a2:da:2b:03:d1:bf:59:ee:1e:70:6e:ce:22:48:70:
         f6:58:18:9b:10:00:5f:c8:aa:14:a4:e5:75:bc:6f:69:11:e4:
         38:07:cb:4e:17:81:fb:95:9a:c5:09:da:f6:0a:c7:ee:39:11:
         2b:cb:43:e7:58:70:78:bc:eb:67:ad:46:1a:cc:f7:54:ee:89:
         d0:fb:52:9b:8d:b6:47:dd:d2:85:fc:3a:6f:f5:57:3f:c1:f7:
         b1:c3:c2:80:47:64:16:67:77:0d:c7:8c:0e:81:22:f7:6e:83:
         c0:32:de:0f:28:b3:51:7a:44:75:2f:97:e8:9b:32:6d:3e:40:
         d6:03:49:f1:cf:dd:83:c3:f6:d0:eb:d6:91:2b:cf:b0:c0:3a:
         d3:4d:b4:e4:7d:b8:9b:50:c2:32:3c:4c:16:22:ed:32:da:d2:
         5d:97:95:13:ca:fc:66:a0:cf:d4:6c:3d:89:95:58:f9:86:bf:
         9d:79:52:25:16:92:2d:66:4f:0d:d4:43:66:a7:4e:47:0d:e5:
         6a:46:ed:0a:ea:30:63:b4:84:15:87:84:b8:49:bf:89:d5:12:
         08:7f:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:20:54 2025 by rpki-client