Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6a56e14-b17d-3fe0-a413-195ab1fe545b.roa
File:                     b6a56e14-b17d-3fe0-a413-195ab1fe545b.roa (raw, json)
Hash identifier:          OZmklsw+ti+mofhKs2L9mbKks1AylwqwNJz5BZahXPA=
Subject key identifier:   E3:4A:17:AE:4C:29:3B:B3:47:92:01:81:A2:F3:B3:6D:5A:DC:59:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDF94A5315B9C89551000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6a56e14-b17d-3fe0-a413-195ab1fe545b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     27602
IP address blocks:        2001:470:18c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:df:94:a5:31:5b:9c:89:55:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c49bc1c8-73f0-44c6-98dc-0fbc12a3d91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:ce:b1:78:27:13:d3:75:3d:4e:35:d2:f6:
                    79:a2:f3:24:6c:11:c3:f0:47:fa:95:f2:da:a4:18:
                    98:cb:86:b9:70:fb:11:91:1e:3f:6a:15:a6:cf:6b:
                    06:cc:9a:64:8d:21:e9:23:6d:19:11:80:8d:70:e6:
                    e1:23:68:ef:dd:96:d6:35:54:a7:8e:ef:82:d1:1b:
                    ae:dc:38:39:ff:24:54:a3:22:20:c7:f8:42:7a:8a:
                    aa:58:8b:30:df:6a:95:41:ad:c8:e1:2d:f2:8d:e4:
                    0f:bb:8d:94:54:aa:f9:72:50:d5:2e:1c:8e:e6:c9:
                    53:a6:b3:9b:01:c9:93:4c:5e:1e:9b:c7:ab:89:61:
                    96:39:9a:6a:7d:fd:f4:70:32:29:56:1b:ec:16:ea:
                    d0:47:8e:1a:1b:f1:a5:c7:78:b5:6d:0e:34:43:5a:
                    82:f2:d5:8a:d0:ef:1b:26:43:bf:ed:02:53:eb:94:
                    1f:9a:82:83:e7:73:19:f7:5b:f6:9e:bb:02:12:ca:
                    96:f8:c1:08:2b:78:bd:19:c2:88:3b:4b:17:43:37:
                    a2:52:ff:99:23:78:e6:71:6e:1a:b2:b6:d7:1c:3e:
                    54:1c:1c:55:75:73:46:0a:72:f1:82:21:9e:e3:93:
                    f2:5a:2e:e0:71:c3:4d:41:01:9a:1a:e9:1e:78:08:
                    51:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:17:AE:4C:29:3B:B3:47:92:01:81:A2:F3:B3:6D:5A:DC:59:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6a56e14-b17d-3fe0-a413-195ab1fe545b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:18c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:22:fa:23:3b:47:8d:b6:02:62:08:94:77:03:18:9a:5b:c4:
         5e:2a:f1:ce:a2:90:ce:84:75:e0:70:a6:24:95:a1:82:08:9a:
         41:f2:29:e5:62:7d:94:ff:8a:3d:8b:03:68:0e:11:75:53:39:
         dc:a8:d1:73:52:51:97:85:85:0b:47:8c:52:d3:ce:31:1e:18:
         df:b3:b1:3a:99:f5:71:2b:bd:68:31:93:58:05:70:98:b6:f7:
         f6:ca:80:e6:a9:13:4a:3b:7b:43:b8:d0:c8:db:9e:0f:8a:67:
         26:82:45:c8:bd:ac:3f:8c:e2:d8:e6:36:83:20:ed:e0:d3:b0:
         81:51:d3:ed:42:22:51:b8:3a:39:a3:17:9e:30:27:a0:fb:80:
         4b:a7:75:57:b5:de:dc:f8:a9:6f:d0:3c:4d:d6:bb:d4:eb:28:
         99:75:ba:08:32:f8:ba:6d:01:d7:eb:dd:31:11:df:b2:c5:59:
         32:f1:88:9a:75:1c:47:68:c0:4f:8c:e3:82:7e:bc:39:bd:ff:
         ed:a0:74:6e:92:9b:f3:5a:22:ac:96:54:9d:35:ce:bc:84:ce:
         5e:21:8c:77:87:06:1a:65:5f:bc:1b:7e:dc:33:9a:ea:34:bf:
         2f:23:1a:66:17:e3:e3:73:9c:e5:04:5b:a6:36:18:93:c4:aa:
         4b:b1:63:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:52 2025 by rpki-client