Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa
File:                     a21137f7-60b5-3d86-af67-0355739a000a.roa (raw, json)
Hash identifier:          YTZSk6NhJTIR5+8pwSuEayLXZotDKoyilojtP2naudE=
Subject key identifier:   0E:AA:0C:80:DD:EB:F9:3F:BF:72:E1:7A:1B:08:9E:BB:8F:FB:A1:B2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC1AAE523F639F9710840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     41155
IP address blocks:        2001:470:1b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c1:aa:e5:23:f6:39:f9:71:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=79f9d7da-e6dc-419a-8cf0-ca56610a8695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:34:91:11:05:a4:3b:b5:8d:5a:f7:46:0b:
                    64:19:97:e7:de:2c:19:66:7f:61:3e:7f:b5:bb:6b:
                    84:24:61:f1:42:4c:de:f7:0b:5b:7a:13:af:d5:73:
                    d2:2d:df:1f:90:13:a0:e5:ab:f4:f7:c0:88:9c:6e:
                    01:ba:ec:ef:2e:60:03:c8:78:3a:8b:07:44:d3:7d:
                    0d:6c:f9:40:81:bd:7d:4d:be:2c:42:77:14:52:e5:
                    38:c4:7f:bd:46:7a:9f:8e:94:85:0d:84:1e:62:5e:
                    70:ed:d9:d7:6b:ec:aa:16:97:d5:f0:f7:a1:64:50:
                    c4:54:de:bf:f7:af:fc:9b:3c:f1:d7:26:00:37:a2:
                    9e:39:8a:08:2c:5e:2c:79:bd:e7:a5:69:e6:04:de:
                    be:df:f4:d5:b9:5f:b1:3b:a0:cf:47:d2:dd:01:6e:
                    73:c1:4f:2e:8d:a7:14:8a:31:33:4c:0a:8f:6c:b4:
                    a4:9d:2d:b1:1b:71:37:cf:dc:09:4d:1a:1e:4f:a5:
                    18:6c:90:33:fb:9c:e1:82:7c:e8:0d:52:4f:8e:52:
                    f2:fd:9f:f1:3a:e6:ba:c4:b1:c9:87:c7:fb:ef:8b:
                    60:e9:f3:87:ba:4a:41:21:60:c8:38:06:d9:ca:29:
                    8f:42:e3:f9:7a:52:35:6f:a4:33:9f:09:1e:a7:49:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AA:0C:80:DD:EB:F9:3F:BF:72:E1:7A:1B:08:9E:BB:8F:FB:A1:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:6b:79:96:b0:c8:9f:14:9b:75:13:fc:9e:ed:c8:86:59:
         06:b1:18:32:c7:c1:4b:53:97:f3:85:3c:b8:e3:00:ad:58:25:
         84:d1:78:02:cc:8e:c3:13:84:c2:4c:2b:7d:c3:70:fc:9e:42:
         1c:9d:5d:cd:58:e9:04:6c:97:d3:b6:a6:b7:1d:ea:53:85:a7:
         bd:dc:5a:6d:04:da:2f:6e:de:c1:8b:f5:45:6d:c3:a2:f6:1e:
         01:62:d9:0a:ce:3c:b5:71:36:a2:43:ee:47:ba:5a:56:de:9b:
         f8:b9:ac:8d:fd:47:23:c1:99:c4:29:fa:ff:13:79:75:85:58:
         f5:73:5e:51:27:66:6e:be:6b:47:4c:30:13:0a:9c:c3:db:47:
         3a:09:a2:95:e0:21:d0:82:61:3d:45:66:13:18:a0:59:c2:08:
         ca:c4:b0:cc:57:bc:2d:bf:20:b5:97:21:fb:6c:a0:a8:b8:ef:
         d5:a9:f2:c3:c3:b9:b8:c7:c5:f6:41:96:5e:79:c9:76:9a:e9:
         b9:56:ed:46:40:91:42:ff:7e:ee:bb:c3:cf:03:ee:66:7d:b5:
         70:c7:6c:15:f7:cf:c6:5e:a5:6a:a3:1a:0c:34:4b:1a:ba:2c:
         61:60:8a:42:b4:8f:25:ec:45:80:1a:c3:f9:d5:0c:97:60:45:
         e1:be:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:23:02 2025 by rpki-client