Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa
File:                     0e0ef29a-9032-32ce-bb82-4792d0881629.roa (raw, json)
Hash identifier:          tiIgkm++8nHZvCQuJGQ42rqoaxwki+37h3XMxy1v2Kg=
Subject key identifier:   94:F0:0B:02:46:8E:48:0F:D4:C2:60:9A:60:70:97:4B:6E:6C:49:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584964846ECBFDD8E81080D026C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     266809
IP address blocks:        2001:470:3b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:6e:cb:fd:d8:e8:10:80:d0:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=9d805add-8239-4d02-b7f9-20994a843ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:71:31:47:60:64:65:41:d7:3e:c6:3d:3b:
                    b3:d5:d4:fb:35:cd:a9:e1:8d:42:77:db:9f:ae:4a:
                    97:be:85:5b:e0:0f:c8:38:6d:6f:f1:0c:d9:9e:4c:
                    c0:a4:19:bb:9c:cb:27:21:c4:1f:2c:7e:4d:71:0b:
                    46:b2:a5:11:43:3f:e9:a8:f6:96:83:ba:f7:86:6c:
                    59:e3:a0:22:2c:17:de:20:07:65:3e:52:96:b5:c9:
                    28:14:fc:f4:8f:80:c4:6e:0d:39:d9:ed:31:a6:0b:
                    57:44:bc:85:ff:21:7a:06:a1:2c:84:5c:d3:b4:df:
                    e2:bd:c6:0b:1b:e2:02:ee:cd:f5:0d:47:68:82:81:
                    90:69:e4:62:22:bb:09:f7:85:1f:8d:a8:ac:52:c0:
                    03:91:45:c7:99:45:b8:e1:21:21:bf:0e:88:ec:3e:
                    47:e1:29:11:f5:78:f0:77:2b:12:3e:cb:3d:8d:41:
                    9e:be:b5:31:a6:40:3a:6f:67:b6:91:1b:48:21:d0:
                    fd:c5:d8:68:e4:e0:fb:1a:d0:d1:d9:50:ec:dd:d7:
                    3d:01:cc:e0:3d:ee:22:b4:fa:c1:ad:14:88:e7:e5:
                    a6:97:10:cb:3f:61:bb:47:c3:cd:fb:66:db:16:f8:
                    4e:c9:be:36:1b:ec:0b:26:d5:2c:4d:51:d7:63:a0:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F0:0B:02:46:8E:48:0F:D4:C2:60:9A:60:70:97:4B:6E:6C:49:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9c:75:8f:fd:1d:ad:de:27:5c:18:ef:92:94:b8:99:ed:6e:
         ca:7a:fd:8f:2e:7f:3a:14:f4:40:91:19:75:c6:5c:26:b7:f5:
         7b:57:c5:a3:ea:0f:59:5f:17:af:60:03:f3:3e:1d:9c:44:21:
         f4:d3:29:69:ee:25:67:31:24:63:ff:6f:ba:5e:c7:52:33:a0:
         4d:82:ae:b2:59:22:19:e8:74:3e:2f:61:7f:fe:24:b4:0a:08:
         b0:ad:e5:f3:5e:9c:05:76:80:7c:5a:40:f8:b5:68:52:ca:f6:
         11:5c:54:d6:d0:cf:fc:98:04:b1:24:fb:80:58:25:58:ee:d8:
         ac:a8:be:43:15:c9:5e:fc:2e:87:83:31:05:06:76:2a:00:8b:
         a2:5d:61:f4:e5:e0:4e:ae:17:93:d1:b5:ef:38:84:a3:9b:74:
         b0:a3:86:22:bb:10:ee:67:0c:91:0e:a1:b3:02:98:16:52:39:
         4d:bb:26:5e:00:49:9d:10:18:27:c6:67:86:58:dd:c5:53:57:
         a1:f8:97:11:25:af:9b:b2:af:66:e1:d4:81:37:f0:78:13:6b:
         39:27:6f:02:90:ec:74:e0:08:a8:a4:15:eb:ba:0a:79:2d:57:
         a0:10:dd:2e:12:21:62:4a:eb:70:76:10:80:82:a8:d3:a5:ad:
         c0:36:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:36 2025 by rpki-client