Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecc03b35-d85c-3b4e-a4a5-d0b5bae72aa2.roa
File:                     ecc03b35-d85c-3b4e-a4a5-d0b5bae72aa2.roa (raw, json)
Hash identifier:          p19Ad++oMynR/etngP8bpJryg15FXQiSkKkEy/uqKdw=
Subject key identifier:   CF:A2:E3:7D:19:41:A7:D1:6B:E8:BB:AA:4F:A6:DF:6D:49:5A:E9:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849CA78A3D07E596D17B5E47F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecc03b35-d85c-3b4e-a4a5-d0b5bae72aa2.roa
Signing time:             Fri 09 May 2025 01:30:11 +0000
ROA not before:           Fri 09 May 2025 01:30:11 +0000
ROA not after:            Thu 07 Aug 2025 01:30:11 +0000
asID:                     53428
IP address blocks:        2001:470:45d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:78:a3:d0:7e:59:6d:17:b5:e4:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:30:11 2025 GMT
            Not After : Aug  7 01:30:11 2025 GMT
        Subject: CN=dca4255f-994c-4c86-ac77-a0be4cb6226d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:12:eb:76:fd:00:42:7a:f9:2b:5a:a3:32:
                    91:5f:55:ea:a7:85:c1:d4:89:12:73:aa:2f:c2:ba:
                    57:8a:0f:2a:0e:38:24:b9:40:9c:cd:3c:63:92:52:
                    7d:64:62:87:6f:5b:6f:bd:41:0c:d0:e4:54:c5:22:
                    ff:ec:2a:ae:cc:4f:57:f3:00:aa:ba:28:78:c0:ab:
                    5d:98:c0:ee:77:27:b6:1d:d3:9c:3d:cf:83:ad:26:
                    97:f4:9a:84:3b:00:64:84:dc:4c:db:b0:ae:38:1d:
                    67:42:2d:32:51:e1:fb:f0:13:56:8e:a9:a8:fb:0b:
                    b9:a7:db:60:49:31:7c:ae:c3:31:b1:fc:3a:f8:12:
                    c0:22:9c:1d:1b:f7:e4:f1:51:fa:28:19:04:58:a3:
                    e9:75:ec:9f:5d:52:fa:e1:7f:5d:33:fb:7d:65:20:
                    e9:a5:7d:16:b1:8f:e1:ab:5e:e1:d4:32:d6:fd:ad:
                    76:58:14:31:1b:0a:5e:17:e9:4d:57:d0:62:3d:f7:
                    6e:82:e2:38:8b:2a:5d:c8:9a:98:d0:db:3c:4f:d9:
                    be:5d:cb:a7:fa:2f:76:80:a2:12:b6:67:d0:87:0e:
                    55:50:ce:8b:4c:b9:79:a3:91:fa:b0:4a:39:a0:e1:
                    4f:a8:43:e9:00:d5:92:31:1d:db:35:b9:2a:86:2c:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:E3:7D:19:41:A7:D1:6B:E8:BB:AA:4F:A6:DF:6D:49:5A:E9:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ecc03b35-d85c-3b4e-a4a5-d0b5bae72aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:45d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:12:dd:29:f7:c6:6c:a5:dc:aa:96:36:29:f7:39:08:93:
         39:b9:32:58:72:fe:4d:70:10:1e:07:a2:98:c2:19:fd:fc:98:
         ee:80:74:bb:21:3b:ec:46:f2:94:41:13:19:ef:be:aa:a5:e7:
         35:0f:3e:d6:fc:b8:dd:74:25:6d:1d:ad:6e:1a:0d:00:e2:59:
         98:ad:5b:0f:d6:d7:23:99:f5:13:ac:fe:1f:8d:41:3e:73:0c:
         62:e5:c2:7a:6b:ca:31:75:fb:85:ea:45:6a:ba:39:40:0d:10:
         5a:77:64:c7:65:81:31:e0:d8:3e:5a:59:4f:a4:c3:3b:24:53:
         fb:10:80:67:1d:00:99:57:3c:2e:34:4d:2b:23:32:fe:1f:54:
         34:70:c9:cf:12:c7:16:01:8a:72:e6:6e:69:b7:d3:49:29:16:
         89:93:d5:08:a6:ef:67:e3:e6:fa:e8:31:63:ae:dd:86:57:49:
         10:9a:b9:20:c7:18:00:51:de:8f:3c:33:76:ae:42:1e:79:8a:
         b3:d6:5b:62:36:33:33:11:5e:10:7d:bd:42:3d:ea:a7:18:d3:
         ce:a7:a3:82:9f:55:65:a5:32:4b:ff:c5:51:1f:8e:06:c6:c3:
         6b:25:e1:72:20:82:c4:14:a9:e6:ac:00:a6:3e:91:f7:29:90:
         a7:46:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:46:55 2025 by rpki-client