Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa
File:                     223d3879-8d9f-363d-bdc4-1bea83fc6165.roa (raw, json)
Hash identifier:          SnZMA4QonIIe0icGFiLjsHHDrKFRLMGCN2HxCTJ05pc=
Subject key identifier:   95:B4:B7:D9:8F:E0:41:B3:C8:7C:BB:24:C5:CA:9B:27:A3:7A:FB:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849AD19FC40A8BC82F35EA1AEC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     394708
IP address blocks:        2001:470:410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:19:fc:40:a8:bc:82:f3:5e:a1:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=c8c89c39-6dce-4b98-a236-147c49923064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:eb:58:db:65:c1:d3:3a:9a:0f:a2:46:4a:
                    52:bc:7c:c7:eb:3a:e0:db:07:73:ad:d8:67:e1:93:
                    48:9f:06:6c:2b:24:c7:74:06:f1:34:25:27:0d:ea:
                    34:d3:93:69:63:dd:2f:8c:2a:69:59:0d:96:9b:06:
                    34:3e:65:8f:a7:a3:52:5f:e2:99:40:81:1d:5f:2c:
                    d3:3f:c5:59:a0:2b:c9:3c:1c:63:dc:85:94:bc:aa:
                    2a:e0:5e:ef:f4:91:5c:59:9f:f5:5f:d6:85:4c:91:
                    c0:a4:b8:11:0f:f3:bb:53:2c:e6:86:3b:1d:ea:b9:
                    3e:da:3a:7c:3e:92:9f:8b:f8:00:f0:22:33:be:34:
                    6e:cb:67:a6:b5:e0:d7:e7:56:4a:3d:1c:19:14:38:
                    ac:7b:65:cc:15:62:b9:54:ff:ff:01:90:cb:2f:72:
                    66:c0:ff:d3:36:a7:26:61:da:38:03:d8:e7:56:4c:
                    75:d7:a6:7b:63:18:01:e5:7f:62:7c:f3:25:f8:bc:
                    e6:bd:69:6c:d1:93:58:f9:92:bb:e8:24:36:c0:30:
                    a0:d7:82:4d:6c:88:47:1a:59:0a:bf:c4:f5:a2:c2:
                    07:78:4a:c7:5f:05:f2:58:39:14:63:e0:ee:49:1e:
                    f1:bd:bc:54:27:ac:d0:3b:ca:25:77:5a:e9:1d:d3:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:B7:D9:8F:E0:41:B3:C8:7C:BB:24:C5:CA:9B:27:A3:7A:FB:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/223d3879-8d9f-363d-bdc4-1bea83fc6165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:61:d2:17:85:ce:58:c4:86:6d:5f:6f:0c:16:93:e7:b7:e4:
         f9:12:6f:cb:6c:18:bd:7d:75:e7:a7:2c:1a:8d:64:15:d4:29:
         e7:cc:49:29:c4:34:c5:de:e4:c2:f1:35:75:3d:ad:78:fe:a6:
         50:8c:87:6c:c8:ea:ea:80:ed:2e:92:6b:ed:a3:e5:d1:b2:31:
         e8:b6:17:e6:80:7d:84:d6:b9:14:64:df:dc:d0:a4:a5:97:43:
         f5:1f:1c:3c:be:19:9e:af:00:7f:b4:6b:61:78:41:c2:03:bf:
         b6:23:9a:ed:d9:f0:1b:e5:8c:ab:7f:2c:c5:27:b7:46:38:bc:
         b0:02:32:53:cb:64:6d:89:55:0d:84:f8:b3:56:cf:5a:eb:b6:
         db:ac:d2:dd:ed:a3:0c:1e:cd:95:b0:d9:89:1a:9e:8e:25:1b:
         62:36:6c:a1:ef:99:c3:e2:4c:15:96:66:9e:c9:b3:e8:7c:ff:
         67:9b:f7:d0:47:33:e7:26:d7:99:14:94:2c:de:4d:b6:0e:8d:
         bb:eb:ff:91:c8:e2:92:a9:30:90:77:3f:e5:c9:51:f8:aa:0f:
         34:cf:27:0d:85:3f:a1:ad:15:5d:8f:ff:27:1e:ed:82:6b:b7:
         1d:01:4d:3e:6e:36:08:7f:48:fe:3b:62:5b:4b:00:5f:4a:e7:
         5a:07:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:13:40 2025 by rpki-client