Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa
File:                     e83e107a-28cf-3287-9c98-61472a7fd96b.roa (raw, json)
Hash identifier:          irqy0siUnWDHmW6HhlLCjNV04i6Z0oKkFxRWKfGmLLM=
Subject key identifier:   D4:ED:C6:9D:2A:81:89:92:39:01:7A:0F:A6:12:19:B2:BE:F5:FB:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E2100FA313C463ECF640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     200184
IP address blocks:        2001:470:175::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e2:10:0f:a3:13:c4:63:ec:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=9cc73197-71dd-4446-96cb-ef2c9fa7a553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:03:af:1a:79:21:77:cf:f4:7a:4a:4c:bb:
                    bc:6a:c6:63:ed:aa:e1:25:8e:0a:d6:4b:d8:77:92:
                    9b:b1:1a:77:dc:c2:41:b1:ea:f4:7c:00:9d:65:b2:
                    63:82:20:cd:38:f9:50:aa:9e:53:88:7d:26:2e:da:
                    c9:dd:6d:0c:cf:77:8e:ee:bd:c0:19:c1:e5:93:9b:
                    08:dd:9d:30:46:6e:83:64:39:db:f6:f9:cc:bd:cc:
                    62:be:f9:66:e0:36:fd:01:b7:60:de:64:fb:3b:6c:
                    3d:d7:6c:49:37:2c:42:fe:de:7d:bb:cd:fc:0a:8e:
                    1f:93:b2:19:d6:46:0b:b2:ae:9e:d3:20:ae:09:a3:
                    fa:67:dd:21:e4:05:dd:37:b1:1c:48:6a:3f:34:b7:
                    85:c5:d2:ad:d2:96:c5:32:29:cd:4c:db:51:d7:e5:
                    16:11:26:63:cd:e3:3b:40:1d:11:98:95:3b:67:f9:
                    02:d3:1f:68:08:5f:2c:7d:50:d8:dd:23:63:9c:31:
                    2c:7e:8c:a2:29:b1:c8:10:8f:84:b4:e5:ab:2a:de:
                    e4:d3:30:04:c9:1a:ce:96:0c:f0:4b:e1:3d:91:93:
                    e2:15:e3:f9:76:68:3a:7d:29:78:26:ca:d6:ff:a4:
                    a2:5e:48:5c:e1:ee:19:79:e5:59:08:4f:88:1f:dc:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:ED:C6:9D:2A:81:89:92:39:01:7A:0F:A6:12:19:B2:BE:F5:FB:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e83e107a-28cf-3287-9c98-61472a7fd96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:175::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:69:26:12:14:fd:7c:c1:f1:f3:70:d8:46:c3:ea:44:d8:d3:
         72:19:f9:f8:d7:da:af:96:0e:1b:a7:e3:e8:ca:4c:9d:a7:fa:
         00:c0:83:8d:ef:70:59:d1:24:a7:e1:8a:23:22:1a:1c:21:e7:
         c5:72:c2:5b:87:db:7c:3c:70:0e:27:05:81:2d:b3:51:d4:d0:
         13:93:97:f7:17:4e:a4:47:be:96:b8:80:a3:41:fa:7c:62:5f:
         82:c8:1f:01:b5:45:2d:b7:29:04:ce:26:7c:49:67:dc:8b:b0:
         ed:18:6d:fd:b4:92:b5:90:d4:4e:41:ef:94:3e:39:13:0e:b3:
         21:4f:87:6f:73:cd:d7:47:4b:b1:ff:69:49:83:45:e1:19:f1:
         da:21:44:9a:0d:da:68:78:54:c9:43:6d:25:25:5e:a2:0a:79:
         8e:5b:a6:2e:8f:ae:15:36:f3:9a:5d:4a:5a:e9:30:33:58:07:
         c6:16:7e:c7:43:25:e8:22:6c:08:08:01:a4:91:77:2c:0c:09:
         56:2f:93:11:ef:49:8b:a3:c6:61:77:8f:04:2b:65:b2:99:b0:
         94:62:b8:e5:fa:7f:2a:b3:ab:94:3f:d7:a4:b6:86:27:df:77:
         8f:52:6b:b1:b2:6c:f0:da:01:c6:c6:f6:8e:52:0c:bf:ae:1c:
         50:de:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:56:48 2025 by rpki-client