Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3619a4b-15df-39df-b4e5-43593750772c.roa
File:                     b3619a4b-15df-39df-b4e5-43593750772c.roa (raw, json)
Hash identifier:          qRjfquQwbmDXgFfSmHhYm7RaiGbxcRiCeym/evxBdJU=
Subject key identifier:   E6:1C:53:E3:77:0B:98:00:5B:C1:90:5C:F2:71:31:35:64:3D:3A:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E6AE63706DA8450913C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3619a4b-15df-39df-b4e5-43593750772c.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     46109
IP address blocks:        2001:470:2b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e6:ae:63:70:6d:a8:45:09:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4c654aac-e0fa-48b3-ada7-ee9630ee99e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:f5:cb:11:74:38:06:79:4b:c8:69:0f:33:
                    25:69:6c:38:56:8a:0c:61:29:00:8b:67:2f:93:5a:
                    c1:6e:d8:84:be:91:9d:74:63:07:68:e8:2b:cc:ea:
                    7c:86:a9:04:9d:6d:27:50:6b:48:20:58:55:8e:3b:
                    71:4e:6d:18:b7:89:0c:05:c3:c4:8e:8a:4b:d2:11:
                    eb:54:b2:bd:63:f8:b8:b8:86:85:d2:f5:0c:2c:8e:
                    1e:d6:3e:3c:96:7a:2c:dc:67:e3:e5:e7:ce:21:a2:
                    1c:b6:4e:0c:a2:6b:5d:8b:fc:d6:6d:cd:eb:c9:95:
                    e8:24:ee:9f:b0:c7:e4:4f:f4:72:0b:1e:aa:4f:ac:
                    b1:77:f7:94:eb:18:af:c7:15:70:17:09:04:1b:52:
                    e4:2c:32:16:26:9a:a8:90:d5:80:cb:56:7e:e1:3c:
                    16:b4:57:8b:c3:4d:59:d4:01:e9:d4:ec:dd:74:17:
                    8b:7b:44:4e:58:c4:90:fa:32:58:4c:3d:12:37:0f:
                    89:23:e1:03:2e:4a:a2:12:57:b4:7c:eb:46:ea:b0:
                    da:c1:44:69:54:73:e1:68:87:86:eb:42:23:38:66:
                    6a:3d:7b:eb:e3:c3:dc:a8:06:3a:09:da:bf:a3:bc:
                    b8:ec:d2:c1:ca:aa:1a:fc:6e:37:75:ad:3d:b1:9b:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1C:53:E3:77:0B:98:00:5B:C1:90:5C:F2:71:31:35:64:3D:3A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3619a4b-15df-39df-b4e5-43593750772c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:14:58:06:e2:9e:1b:b8:08:af:4a:d6:2a:bb:90:63:36:e0:
         b9:6f:15:d4:d4:be:b3:1d:b1:24:28:0d:a7:28:d1:b8:4b:8d:
         57:ea:a0:cb:85:e7:fc:74:ca:10:27:89:92:27:24:05:23:c5:
         6a:58:4a:2f:b2:3d:6d:1e:85:8d:f4:d0:5f:9f:10:06:cd:13:
         01:2c:6a:a5:ec:3b:b6:97:68:71:a4:db:53:4e:42:ba:fd:5c:
         e3:a4:8a:fe:53:bd:12:b2:ba:cc:df:34:8e:5e:eb:68:26:e6:
         c4:ab:32:5a:d7:df:1a:cf:65:a6:61:e9:8d:29:6d:34:be:57:
         97:71:de:dd:a5:7a:22:a1:51:14:05:27:70:e2:ff:b4:c7:0a:
         64:71:5b:20:5c:c6:15:04:a0:75:f2:67:78:84:17:83:5f:7c:
         7e:21:92:0a:98:15:08:ed:9e:f6:2c:11:13:c7:b2:83:1f:e5:
         28:23:1e:36:b8:79:ff:71:46:c5:3c:02:85:80:fe:ad:4e:13:
         30:e4:4b:79:ce:e3:28:98:83:64:1d:db:9b:e1:f9:df:55:8e:
         01:db:40:37:c6:d3:bb:25:7f:d2:f3:5a:d6:f3:66:59:75:c1:
         0b:48:1c:30:f6:04:23:34:9e:9d:47:b2:aa:8c:29:af:1d:89:
         b0:70:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:02 2025 by rpki-client