Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa
File:                     f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa (raw, json)
Hash identifier:          6de5jVXLXz3nqVpufEW7sKVB4/Xt2SQAAhgyPXmkidU=
Subject key identifier:   5B:8D:90:B7:3C:B5:54:09:27:B0:1D:D6:1F:CB:4C:AB:51:41:41:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858490E16B2AEF38AAD055C4F3600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     51069
IP address blocks:        2001:470:3e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:b2:ae:f3:8a:ad:05:5c:4f:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=7ccf6d08-979a-45c2-b4a9-3bee84c38c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:14:a1:b0:77:96:83:e4:4f:55:07:93:0b:
                    29:d7:a4:c4:d8:9b:f9:29:e1:c3:84:80:21:55:28:
                    ad:a9:ae:fd:8d:7c:27:a7:2c:5f:4e:03:d0:97:fd:
                    28:7a:91:0d:32:2d:d8:72:99:e9:92:cf:87:14:08:
                    b3:9e:e9:b7:ca:7b:f1:cb:79:ec:83:66:cf:9b:1b:
                    33:b6:17:b7:fd:ad:c2:ae:4d:e4:8e:9b:d6:85:ea:
                    40:eb:9a:a5:14:ae:69:13:10:ba:d5:13:57:31:94:
                    92:b9:f6:df:59:fb:aa:39:5e:73:de:1a:db:79:24:
                    c3:4d:b5:0b:4f:11:dd:33:f8:a0:a5:da:95:8a:ae:
                    c4:cc:df:31:1d:e8:c5:7e:99:8e:cd:9c:e9:41:16:
                    eb:74:90:d3:c7:7c:a0:8b:7a:e0:f3:bc:b3:a3:42:
                    ec:17:17:92:18:1d:ef:dc:3c:fe:12:c6:9c:0d:6e:
                    7f:65:c3:c4:99:6b:49:d6:6c:4d:bb:f5:a7:1a:8a:
                    65:1f:ce:d1:3c:8c:1a:03:f4:89:ad:14:88:ac:62:
                    b6:56:f9:2f:02:02:b0:88:43:ce:65:31:50:ed:1d:
                    cf:41:3a:48:b6:02:19:ef:54:79:02:7a:67:ef:62:
                    45:ae:07:ff:24:ce:a6:13:db:16:85:be:12:5d:b9:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8D:90:B7:3C:B5:54:09:27:B0:1D:D6:1F:CB:4C:AB:51:41:41:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7ef0847-1c6d-3a7f-a14a-20d1d78a1f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:12:f7:47:4c:67:ff:5c:23:55:f0:5b:d0:a2:69:bd:62:29:
         2c:57:74:71:e2:ec:29:66:46:33:e2:83:c1:f6:34:c4:90:fb:
         6b:75:cc:29:37:d6:4e:80:91:2f:cd:b8:ac:dc:ac:36:aa:12:
         a8:61:37:af:db:be:26:ab:7e:f6:07:a8:ed:e2:ee:97:44:76:
         26:e0:3c:3a:dc:43:ef:b7:64:85:fa:42:4e:26:e1:e4:6c:57:
         4a:2e:53:e7:a2:e6:09:27:01:06:d9:b5:a4:9e:a3:36:b7:43:
         e4:ff:4c:63:26:45:e6:3d:eb:22:69:a6:96:35:89:51:80:c9:
         ba:6b:74:f3:32:5a:f0:ce:22:35:b1:92:f2:b6:4d:46:19:b6:
         1b:81:a2:89:4b:58:83:c2:e5:30:04:5e:10:dd:df:eb:db:96:
         82:ba:65:8e:61:71:7d:78:08:9c:93:5d:9f:71:1b:0c:8c:f8:
         4f:2d:21:ab:bb:df:a7:d8:c3:84:a9:c7:e6:c9:cb:5b:cb:28:
         50:2d:11:aa:94:31:91:32:45:70:b1:0f:0f:99:7b:b2:c9:a6:
         21:5b:3c:44:64:d1:67:ed:ba:58:57:29:32:fa:60:c3:59:79:
         3e:93:cd:fc:dd:a6:65:e7:e8:df:21:c6:6a:2a:8b:91:5c:f7:
         75:23:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:18:53 2025 by rpki-client