Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13649c12-8ae4-3b43-9876-d17d24aa5381.roa
File:                     13649c12-8ae4-3b43-9876-d17d24aa5381.roa (raw, json)
Hash identifier:          VdSMF4C31cRyg0lbge7znP0lyabpDzh60ZyGbU5X4fc=
Subject key identifier:   DE:A1:0C:89:99:BD:53:07:CB:44:CB:BC:8F:EB:8F:AD:ED:FC:01:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A4C3B40EF8039800B79FB9880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13649c12-8ae4-3b43-9876-d17d24aa5381.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     19054
IP address blocks:        2001:470:3f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:40:ef:80:39:80:0b:79:fb:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=0add4a35-4f20-4187-8e94-1db18d4469ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:01:35:c7:14:dc:26:fe:af:66:dc:6f:eb:00:
                    21:73:9a:c7:34:76:57:c4:2d:22:9a:04:61:40:7a:
                    70:5e:47:bf:12:7d:24:44:e8:1c:64:62:54:1c:da:
                    5f:5a:2c:ae:13:fd:4a:a9:06:88:af:e2:89:7a:9b:
                    92:11:a0:08:4f:5d:cd:6b:ba:35:6a:f0:a8:a7:e5:
                    e3:ed:ea:b6:97:22:46:56:87:fd:c0:35:c5:bd:d7:
                    96:82:89:dd:d0:81:f5:8f:f6:ce:ae:a4:20:60:6f:
                    a0:02:61:12:e2:e1:27:7b:9c:fa:f3:af:ea:cf:44:
                    62:b5:f8:16:08:f2:9a:21:6a:7b:05:e0:d4:16:20:
                    0c:7a:25:60:6a:62:a5:ef:2a:f1:80:ae:b3:38:0f:
                    db:68:2a:8e:b4:a9:da:c7:00:3a:93:27:63:e3:34:
                    33:44:de:11:f0:09:35:6f:e3:cb:30:f4:50:d6:e7:
                    26:c4:54:67:7e:33:54:41:af:b5:59:dc:55:4d:a5:
                    26:dc:c1:e1:e9:31:79:04:1d:f5:a1:90:c6:7a:88:
                    5d:b1:7d:2d:f1:a7:ee:d0:62:76:45:f3:35:20:78:
                    26:fc:55:bf:0e:c1:3e:bc:06:de:7b:ab:51:2c:59:
                    c6:de:a2:ed:61:c0:e2:a0:86:7b:a5:c4:81:64:d3:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:0C:89:99:BD:53:07:CB:44:CB:BC:8F:EB:8F:AD:ED:FC:01:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13649c12-8ae4-3b43-9876-d17d24aa5381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:36:83:e2:56:16:94:e9:36:6c:38:2f:3b:fe:b1:03:90:
         51:27:fe:93:38:ae:e1:01:26:d0:fb:f3:f5:66:3a:c8:58:10:
         22:4e:4f:fb:47:c4:ac:bb:e3:4c:05:46:02:10:77:5d:38:23:
         20:04:99:6c:a7:37:75:40:2b:8e:f9:54:08:27:b7:ee:1a:08:
         1a:d1:f1:69:1f:41:aa:65:8a:9b:78:e5:29:cd:89:1a:7e:b1:
         7d:81:89:65:de:52:52:06:42:9e:db:0a:55:68:57:b0:8c:84:
         74:04:dd:3a:1c:d9:fd:07:a9:53:08:9a:ac:42:45:cb:50:6d:
         9a:ca:2c:66:b8:3c:64:82:f3:02:d9:f0:82:96:ae:e0:00:e0:
         81:34:e8:b3:72:0d:8c:6f:ff:20:9c:82:46:20:0c:5d:f7:d0:
         a1:19:07:aa:48:b5:8f:cc:61:7d:5f:ce:da:ab:67:23:da:40:
         a8:f3:f8:a4:74:21:6b:55:77:4d:95:5e:97:02:94:c1:a9:cd:
         a0:3d:bc:c2:9d:52:a0:36:96:a6:59:e9:13:fa:11:87:f4:d0:
         b0:61:1c:a2:77:da:e2:8b:ba:da:21:60:03:cb:f8:2d:8c:84:
         86:d5:75:69:9d:94:98:cb:b7:c6:c8:8a:34:b3:ca:82:26:ad:
         4b:1d:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:32:25 2025 by rpki-client