Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bc17bda8-93ab-373c-a1c7-7b81c0675f20.roa
File:                     bc17bda8-93ab-373c-a1c7-7b81c0675f20.roa (raw, json)
Hash identifier:          v9ZOSA0ye3obZaGSvyQ2Bk98JjCbAxrljwa2wi7PfHU=
Subject key identifier:   27:53:83:91:4A:BF:4B:3A:0D:B8:85:99:0C:9A:AB:86:C6:1B:DD:1B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584973ED6FCC8294010FF06C5D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bc17bda8-93ab-373c-a1c7-7b81c0675f20.roa
Signing time:             Tue 08 Apr 2025 01:30:11 +0000
ROA not before:           Tue 08 Apr 2025 01:30:11 +0000
ROA not after:            Mon 07 Jul 2025 01:30:11 +0000
asID:                     211448
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:ed:6f:cc:82:94:01:0f:f0:6c:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  8 01:30:11 2025 GMT
            Not After : Jul  7 01:30:11 2025 GMT
        Subject: CN=3449b403-65b8-47a8-97b5-bd08369aa172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:b5:4d:5b:2e:af:00:b3:c6:f4:e5:c9:1c:
                    f0:f4:4d:1a:06:ca:ef:8a:01:21:f7:c8:39:f1:1d:
                    c4:41:72:d7:8b:b5:d1:a6:22:2a:ee:c6:52:fd:43:
                    88:0a:ba:86:21:90:7b:eb:72:ec:71:ab:ec:bb:a6:
                    d1:8d:70:cd:26:2d:cb:8f:1d:1f:97:39:18:1f:35:
                    25:25:83:61:22:40:33:a0:5b:45:0c:ab:21:72:59:
                    4b:4e:91:3a:22:8a:f5:82:ba:7d:48:1f:b7:bf:05:
                    af:1b:74:ba:72:72:d4:2a:18:24:d1:d5:88:5d:b3:
                    60:7a:55:57:a2:39:a2:58:4a:ba:b5:ab:71:ff:5e:
                    af:68:99:10:a7:b9:8a:74:46:a8:d1:81:0e:bb:c0:
                    46:03:31:1f:f2:83:ad:c1:1a:73:56:be:d0:91:11:
                    77:79:fd:8a:c9:09:dc:56:97:a0:ab:2c:02:49:08:
                    f5:4a:3e:e9:ed:d9:ce:12:f6:46:34:c9:23:60:cc:
                    e5:8c:b8:8b:0f:2c:01:50:a7:26:cd:c1:bd:ea:b3:
                    8c:19:63:a7:2d:08:46:f6:8d:98:0c:44:bc:45:03:
                    af:f2:5a:7e:96:90:8e:8f:b3:f9:bd:fe:b2:75:01:
                    e3:89:2e:ae:af:f4:6a:ad:64:ef:6b:27:b6:77:e7:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:53:83:91:4A:BF:4B:3A:0D:B8:85:99:0C:9A:AB:86:C6:1B:DD:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bc17bda8-93ab-373c-a1c7-7b81c0675f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e3:ba:8a:ae:34:26:cf:2a:db:48:47:e5:71:ef:96:9b:1e:
         92:d9:22:ac:fa:82:9b:fa:06:56:2a:13:25:3b:a2:41:a1:73:
         12:6d:9d:9f:2e:1c:46:7f:48:22:da:4d:e2:64:62:b6:b5:21:
         f6:10:59:75:2a:cc:b5:09:19:c4:ec:e2:90:e2:fa:1e:b3:dd:
         28:1c:28:d0:03:5f:de:45:cc:ab:fc:02:f0:77:7c:75:1d:c0:
         34:e8:bb:52:e0:c5:3f:5a:27:58:76:34:6b:d2:ee:e4:c7:6f:
         91:5d:2a:20:d3:bc:f3:21:23:58:1f:7c:fe:8e:84:48:d5:9a:
         d0:5c:37:4b:ee:a0:5c:a7:cc:2f:1e:aa:8d:aa:1d:52:9f:37:
         fb:42:64:2d:54:e6:6e:f3:f6:19:a2:09:87:74:49:88:f3:6d:
         18:cd:43:6e:ff:3e:13:e6:8c:6d:1b:f7:55:c8:a7:fd:eb:5d:
         4e:08:36:68:cf:2e:da:f0:60:10:33:c0:ad:7e:fb:15:79:aa:
         dc:fa:2e:9e:a2:1c:48:c9:f5:fc:df:06:37:66:59:80:ca:df:
         b1:5d:74:bb:23:f3:fe:f1:e2:b2:b9:ec:db:d7:64:9c:47:d1:
         6f:49:85:b5:0c:75:d8:e0:9b:97:7b:b0:40:8f:1c:a1:d2:34:
         9b:5e:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:57 2025 by rpki-client