Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
File:                     1637f82b-b875-3e51-833e-383542b07770.roa (raw, json)
Hash identifier:          uIX5NeaIpwtp0ZRYn/XuAg8PNYYmJSOVi1ZRoXzxkRs=
Subject key identifier:   77:1A:99:8B:07:D6:1D:CA:FE:CE:56:37:BF:E4:15:BC:FF:3D:CA:D1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDE87C07335C7DFB7FA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     12183
IP address blocks:        2001:470:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:de:87:c0:73:35:c7:df:b7:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=ea034d88-4cb4-44fc-9f15-2ce9032319c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:dd:46:7f:d5:ba:e2:1f:e8:03:e2:b1:8c:
                    55:9e:da:9e:41:97:00:59:23:96:43:56:c1:ea:b8:
                    45:cb:2d:c0:f7:a1:be:0b:dc:3f:fb:67:c8:4e:fd:
                    ec:4c:6c:bd:aa:5c:48:4c:6f:9d:9e:4c:ec:5c:fe:
                    14:8b:aa:1d:a2:3a:66:bb:28:01:33:35:0a:0f:f0:
                    93:00:00:c7:45:10:6a:ae:69:d9:0b:3f:04:88:69:
                    ae:c2:70:b4:58:b0:3b:65:83:d2:6b:5f:50:ab:34:
                    88:fb:1a:2f:17:7c:05:0d:41:51:bc:1b:06:1f:ce:
                    41:2f:3e:f4:65:b3:d3:a6:d1:86:cd:1f:73:3c:38:
                    29:48:f9:0b:ea:85:9e:ef:0c:30:7b:e4:91:35:cc:
                    b4:82:df:e7:f0:51:5b:e8:dd:a9:df:7c:ab:29:66:
                    ee:bd:29:fd:07:bd:23:ad:ff:d8:68:53:63:5e:4d:
                    74:22:3d:e6:ab:74:de:72:c0:16:58:4a:01:ea:d3:
                    6a:6c:ce:fc:76:f3:fb:ea:37:2a:53:7a:50:74:35:
                    6b:7a:88:65:70:0a:56:c3:0a:0c:96:dd:5c:ee:46:
                    1e:18:55:28:6a:c3:ad:15:63:6f:d6:2a:e6:4a:44:
                    ba:14:4b:47:f0:40:69:61:9a:aa:fd:6c:02:62:df:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:99:8B:07:D6:1D:CA:FE:CE:56:37:BF:E4:15:BC:FF:3D:CA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8a:49:10:ce:4b:e4:b3:51:11:05:52:db:a0:1e:09:4d:26:
         bb:b6:e8:dc:0b:1b:80:ce:3a:e3:1d:45:e0:56:5b:84:7b:6f:
         d7:e0:e1:64:29:06:ec:36:ad:fa:e6:3d:17:fe:a8:51:50:87:
         f8:62:30:01:69:ca:2d:67:66:dd:1f:56:55:62:34:4d:d0:48:
         53:8b:ae:2a:86:a4:ee:77:19:53:ca:e8:e0:40:12:1b:4c:55:
         c4:d4:3c:46:29:b3:ef:b5:24:16:8f:ec:e8:22:1b:2f:dd:95:
         ca:f8:02:0a:45:c5:ea:35:ee:08:d7:3f:4d:4a:90:5c:c1:2d:
         e0:de:b7:f8:52:3a:59:ae:98:ad:a9:97:38:f6:24:ff:82:3f:
         e6:cc:63:39:db:41:8e:b7:d7:2b:fa:bf:6f:e2:2c:30:b5:c1:
         93:c3:c8:10:b2:4e:6a:be:0c:8a:a2:f9:c0:eb:74:5a:9f:8b:
         fd:50:6f:7c:46:00:22:c2:ee:54:ee:ea:9b:76:94:76:3f:8d:
         fd:fe:51:fb:4e:0a:d7:25:37:c0:11:c0:5e:39:dd:55:eb:a8:
         17:f5:0c:81:58:84:5f:1c:7a:cd:36:a1:73:2c:ae:f0:e0:a4:
         50:b5:7b:6d:5d:ee:37:19:23:64:b8:ec:95:2d:81:62:d4:c3:
         d4:09:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:13 2025 by rpki-client