Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9111593-ea19-337e-adbe-bc45e335856b.roa
File:                     c9111593-ea19-337e-adbe-bc45e335856b.roa (raw, json)
Hash identifier:          WLFqIqk7MoLVyRFOIUNFUIFe4uLJrOBKr6WMZlN/Gvc=
Subject key identifier:   55:ED:3B:B9:33:DF:50:FC:72:6A:86:2E:A3:84:93:44:5B:A1:B2:3D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849AD19FC25952170D5EDD2B380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9111593-ea19-337e-adbe-bc45e335856b.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     36794
IP address blocks:        2001:470:410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:19:fc:25:95:21:70:d5:ed:d2:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=a6fdae2b-ed2d-453a-ab67-1de849a31e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:a1:40:58:2a:10:9b:4f:fe:da:fe:f1:f8:
                    68:f3:ae:ab:96:8d:7d:58:85:b4:5f:27:b0:1a:59:
                    c9:85:7c:fe:13:f1:d5:e4:93:76:27:ea:4a:12:ea:
                    6a:12:31:89:28:6a:5b:33:ac:c4:54:8c:99:f0:b3:
                    19:4d:71:14:6a:45:df:3f:bd:30:ff:0c:2a:21:9f:
                    de:0b:44:06:fc:e5:b6:42:98:a0:03:77:9b:47:72:
                    14:4f:61:ae:ac:1b:5e:d6:b1:dc:fc:7a:32:c2:5f:
                    bc:28:6d:f7:c5:eb:1b:c9:9b:20:5d:65:4e:09:b8:
                    27:b1:15:45:76:11:bf:91:0b:ce:21:27:04:15:49:
                    4e:2e:ad:0a:4c:7a:f0:4c:cb:bb:1b:db:b8:22:f0:
                    a3:cb:fd:d2:2a:48:7e:16:39:27:c8:e0:2e:5d:6f:
                    5e:89:61:0a:fe:fb:2d:1a:9c:f5:81:fd:8b:25:d8:
                    a1:05:4d:bf:70:7e:51:f7:dc:27:6b:89:f4:c0:38:
                    98:17:46:f8:70:41:aa:f7:b1:68:3f:f5:be:89:fc:
                    43:6c:9d:35:d2:8c:69:07:60:de:d2:f7:46:ea:ab:
                    25:33:f7:d0:da:6b:fe:22:3a:19:da:ee:e6:30:86:
                    22:0b:5f:7c:1c:c7:8e:86:53:e7:c9:3b:44:81:0e:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:3B:B9:33:DF:50:FC:72:6A:86:2E:A3:84:93:44:5B:A1:B2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9111593-ea19-337e-adbe-bc45e335856b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:aa:5e:a3:4a:d1:bb:cd:ac:b8:f8:49:4c:4e:0d:ae:3f:
         be:be:3d:1d:40:10:3e:12:96:f4:c6:6a:d4:ef:d9:58:f3:6b:
         f7:22:ec:44:36:3a:f4:0a:f6:32:8a:9f:9f:15:b5:c7:a2:98:
         64:e4:7f:bc:4c:c0:90:fc:e1:9f:ee:68:32:a2:29:e2:72:7d:
         be:49:01:a5:8a:6e:61:60:36:e5:10:be:27:2e:bc:5c:02:94:
         39:5c:e7:1e:74:48:be:74:a7:91:81:df:73:61:d7:95:3d:11:
         4e:f7:a0:83:b7:d1:c5:00:e8:34:7c:06:6a:27:3c:7f:15:b8:
         e1:14:a3:ff:b8:13:d0:bd:4f:96:c8:40:27:38:14:d3:8c:be:
         25:6a:6b:fe:b6:4a:3e:71:13:b4:29:10:ad:0e:14:22:2f:47:
         15:42:d0:6d:e9:39:4a:83:7d:91:6f:11:cc:39:2e:45:c0:00:
         b4:f7:19:4d:65:a6:dd:20:ff:ee:0e:cd:d2:d8:f6:73:f4:de:
         2e:a7:f7:a2:3c:6c:24:05:45:95:f8:dd:4f:46:17:d5:5e:a1:
         b4:34:4e:58:8c:be:fd:bb:1c:66:c9:bd:1c:9a:ff:06:5a:8e:
         32:12:15:5a:4b:a6:bd:6b:4a:99:41:aa:5d:2e:b2:a5:4a:63:
         e5:a5:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:04:34 2025 by rpki-client