Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa
File:                     ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa (raw, json)
Hash identifier:          Oiu4Kwah6V8ngcZQecbJRlJBpqInr6QJC0EDLfCyQrk=
Subject key identifier:   97:3F:4D:C7:C6:7D:47:38:55:53:0F:79:E2:A3:7A:B7:C6:2E:85:29
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A10352E6CB74D3C813A15C500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     15461
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:2e:6c:b7:4d:3c:81:3a:15:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=15c09e33-929d-4d24-8305-527fb879eb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:a2:e0:7e:7a:d7:6e:8e:b2:f2:50:67:fa:
                    ea:44:fe:c4:6f:d1:34:ed:1b:41:d9:68:0b:8e:04:
                    b0:d3:c8:6c:4f:83:a1:3a:fc:9d:3a:a7:5e:0e:1f:
                    75:df:e8:ba:b0:11:f1:da:57:df:1b:0d:76:4c:03:
                    84:62:a6:ab:28:1e:73:07:8f:31:9f:f3:02:92:9e:
                    e9:f9:d6:4b:e0:94:42:2e:17:b4:49:e4:30:e8:fa:
                    14:e7:82:5a:90:7d:d1:fc:a9:ea:e8:2b:5b:3b:d1:
                    86:09:2c:15:37:38:1c:43:dd:43:ab:38:40:98:f6:
                    59:83:21:23:b6:be:72:ed:88:00:13:a7:9d:99:c4:
                    34:98:40:6b:e7:1c:93:68:b0:c0:c1:cd:bc:7d:1f:
                    6b:43:ec:85:62:cd:be:f8:48:2e:91:51:14:4d:2a:
                    ee:35:c5:a8:a9:e9:1d:97:89:0b:65:07:a3:49:f0:
                    f3:bb:cb:f5:c6:ed:ab:f9:35:90:7a:af:94:7f:8f:
                    3d:9b:07:cd:ce:7d:55:86:8c:8e:80:0f:d2:98:36:
                    4a:a6:cb:a6:16:5e:e2:05:1c:95:62:89:02:11:0f:
                    85:9d:c8:2b:b3:6f:43:81:ea:d3:e7:dd:2d:5b:c5:
                    a6:ff:8e:61:92:46:d1:2e:5d:39:dd:54:5b:31:eb:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:4D:C7:C6:7D:47:38:55:53:0F:79:E2:A3:7A:B7:C6:2E:85:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecdf7e20-9757-3fc2-ad12-9fcc78b746ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:ca:42:09:38:86:1b:18:3b:d2:c0:eb:77:03:5c:5d:b9:
         4f:c5:aa:9a:2b:c0:87:e2:2c:64:b7:0d:b6:86:5f:01:c9:82:
         4d:ca:b1:30:8f:da:5c:fc:3e:ba:cd:ef:df:94:62:9c:20:53:
         4a:d1:f7:68:ca:00:01:07:81:49:12:e6:dd:f6:40:6a:82:e4:
         4d:db:20:c9:17:08:8c:4e:75:4d:9e:b8:3e:7a:7d:7c:46:05:
         b4:27:f5:f5:36:ef:3e:7c:32:58:14:5c:f9:66:d5:d4:c7:74:
         59:71:ae:30:48:84:7a:08:89:a0:45:5d:e9:ff:49:79:f4:7e:
         c7:9b:0f:af:a4:02:84:01:88:32:ca:41:46:43:17:8e:e3:08:
         75:28:b4:cd:72:64:11:18:43:20:f2:23:08:1e:3d:83:e6:46:
         fb:c4:ed:70:3c:a6:51:c5:0c:a0:0e:d9:83:19:e5:aa:76:db:
         fb:7a:04:37:72:89:cc:d3:42:11:b3:33:2c:df:5f:81:c6:10:
         8d:e5:c0:72:e3:6c:27:c7:16:e2:ae:2f:0d:73:29:e6:c3:c1:
         16:f3:8b:56:68:ed:24:7c:73:d6:f7:93:85:89:05:bb:c3:f1:
         1f:5e:5f:02:15:de:91:a2:f9:c1:01:f1:70:ba:cd:03:c5:bc:
         3f:c8:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:25:07 2025 by rpki-client