Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa
File:                     a62bb16d-8f8b-39cc-9333-dfee8560816b.roa (raw, json)
Hash identifier:          F2d9eOqmP60M9mkiQ7YMB96AocPgDcHNPSeoP8IyJJY=
Subject key identifier:   A2:C5:47:C1:AD:5B:08:0D:2E:8A:67:57:18:19:73:FA:0E:37:C9:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC36D6D2BB049A81C9F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     60456
IP address blocks:        2001:470:1df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c3:6d:6d:2b:b0:49:a8:1c:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1095357e-9fea-4fa3-94c8-4ece53bfa812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:69:31:1a:7d:b8:06:9c:17:d6:9d:80:a6:
                    85:f4:e4:6a:eb:cb:07:0f:2e:0e:75:79:34:09:20:
                    8e:97:ae:55:d3:66:9a:81:6b:36:bd:50:30:13:82:
                    97:df:93:a2:75:6d:fb:c0:aa:0a:4c:af:d1:12:10:
                    3e:b8:de:e9:c7:76:6a:5c:1d:41:16:de:46:3b:13:
                    5f:dd:f5:bc:57:b6:8b:06:a7:a2:42:35:a6:ed:56:
                    37:94:33:44:76:46:dc:cc:a2:6d:24:87:cd:0f:c7:
                    7a:02:64:c3:40:82:f6:43:c0:17:2b:bb:33:58:62:
                    b9:00:85:1b:23:c1:fd:fe:86:9e:f9:23:a7:a6:fa:
                    c8:21:0b:76:ee:3d:71:63:db:f6:63:1c:18:77:72:
                    e4:0e:84:eb:62:93:82:4e:39:5a:27:01:79:21:94:
                    6b:1c:bf:f7:37:19:4f:ac:e9:0a:0b:cc:87:3c:2a:
                    93:56:95:05:ad:62:76:ea:ba:e2:e2:49:54:3f:5b:
                    87:32:87:1e:83:99:ed:6a:94:48:18:db:52:e6:00:
                    5a:4c:b5:8e:9d:d2:cd:d6:f6:a5:6a:2c:ec:ba:ee:
                    c1:f9:f7:e8:2e:bc:3c:84:13:ed:f5:e8:0a:83:98:
                    ae:31:f5:d7:16:78:74:0e:3b:58:9b:d6:8a:ba:86:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:47:C1:AD:5B:08:0D:2E:8A:67:57:18:19:73:FA:0E:37:C9:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0f:bd:77:52:2a:b9:65:d9:95:ab:e2:4c:be:3e:ec:7c:ea:
         3f:48:37:a2:ee:02:b2:73:45:3d:4c:88:b0:b3:ef:8a:4c:db:
         57:3a:f0:14:b2:da:02:73:d1:af:e8:1c:e5:00:34:4d:c2:8e:
         21:d9:5f:8f:14:06:f1:46:17:e1:74:13:0b:74:6c:3e:c3:50:
         6c:ac:41:f9:35:0b:8a:9c:54:79:be:83:03:b2:2d:60:be:22:
         25:11:b6:07:3b:42:03:e0:c7:6b:b7:7c:a1:52:37:8b:d0:39:
         cf:95:6b:bc:5c:78:24:9d:10:4a:80:68:1f:dc:aa:6e:07:24:
         a7:a8:d2:c4:62:e1:9c:07:15:91:34:e4:47:e4:40:2c:a4:60:
         21:4a:1b:d1:42:8f:58:5e:48:21:3e:fa:fa:d7:f5:18:43:15:
         27:f9:cb:64:e9:19:12:4e:f0:d8:31:78:6a:c4:93:d0:42:1c:
         d8:f4:86:00:4f:6f:27:0c:e6:e9:79:6a:82:9e:56:ff:52:ae:
         47:e2:f7:a2:be:ba:e3:f8:08:d0:5b:cc:05:a0:ad:01:14:6c:
         79:83:5e:6f:a5:83:03:b2:91:4c:3f:5f:63:f9:8c:46:23:3f:
         a3:51:0d:50:9a:b8:32:fe:d0:6d:f1:02:b6:67:8a:97:e1:8a:
         ee:a0:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:29:19 2025 by rpki-client