Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa
File:                     2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa (raw, json)
Hash identifier:          y8usefD/AxITpVJFxnvhkL/umzlGP8Q1Iw20dlOG1Mw=
Subject key identifier:   07:69:6F:AD:D7:06:4E:84:B1:E2:A2:CA:22:26:62:FB:E4:DA:F6:77
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A03A5711BC719C5FE76ADCBC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     50923
IP address blocks:        2001:470:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:71:1b:c7:19:c5:fe:76:ad:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=21d36348-c2ea-4e13-8684-8e2ef61d7144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:b6:8b:1e:7f:8d:67:97:d3:e0:e4:50:d3:
                    a6:05:01:fc:3f:82:6d:14:54:4b:78:e6:91:e5:1b:
                    b9:e3:1f:16:e3:d8:5a:92:4f:30:3c:be:e0:16:95:
                    02:e4:a5:dd:66:d9:96:e8:d6:f1:57:7b:5f:2b:aa:
                    39:27:97:08:03:b4:06:e7:fe:c2:c9:74:6e:2c:d1:
                    c9:54:93:99:d8:0d:19:d7:90:14:c1:7e:95:14:88:
                    eb:7d:5d:06:ad:aa:58:06:ef:e5:fd:41:a7:1b:85:
                    46:a2:5f:94:f4:03:a2:53:5e:6c:3a:cd:d7:80:46:
                    c8:e6:8e:55:d5:29:b4:a3:b9:15:8d:54:b6:2d:2c:
                    80:e7:ad:2d:21:12:22:e0:ee:68:70:d6:58:48:f4:
                    55:b4:d2:39:bb:15:23:a4:fe:a5:1f:b1:99:a5:37:
                    10:90:b2:5c:9f:88:61:cb:34:16:35:da:f4:1a:0b:
                    9d:aa:c3:d3:4f:9c:4e:a1:82:07:df:48:6f:e8:42:
                    f7:8b:04:f1:76:a9:37:c1:b9:54:51:d1:aa:e0:f5:
                    f7:ae:8e:a5:fd:47:2d:da:5a:c5:69:bc:0f:11:a2:
                    40:b9:7d:b4:cb:39:e7:be:1f:ca:65:dd:d7:d5:56:
                    26:d8:66:32:c3:2b:ae:9e:53:21:21:3c:e0:75:dc:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:6F:AD:D7:06:4E:84:B1:E2:A2:CA:22:26:62:FB:E4:DA:F6:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:05:11:8e:b8:f6:dd:e1:6e:09:e9:37:d5:b7:e9:bc:7f:bd:
         e5:30:c4:00:e1:37:3b:b1:9c:43:14:40:6e:73:25:89:74:5f:
         46:63:cf:3b:b4:f9:25:d3:95:28:a3:fe:25:79:7a:a8:4a:3d:
         e4:cc:20:62:39:70:66:61:72:0e:b3:d1:70:b6:b4:c5:43:52:
         a5:ea:91:b4:50:fa:0d:11:e1:84:87:ec:81:10:d7:97:dc:b8:
         b3:20:4a:09:92:99:06:ce:75:98:e3:64:86:ed:3e:cf:0a:bd:
         88:2d:17:ad:cb:d9:8f:57:36:02:78:21:2a:4d:04:cd:2e:80:
         fe:19:16:50:50:4b:46:14:1e:69:bb:b1:11:0b:80:cb:8a:93:
         1c:53:56:17:7b:64:ac:28:1c:fc:a0:64:00:b9:88:3a:d4:82:
         5f:80:84:e8:e4:e0:80:30:9d:1b:19:c8:d4:12:31:b7:3d:2f:
         22:5b:61:06:e3:db:df:b9:84:48:a5:c8:ef:ba:e3:e1:f9:f6:
         64:3c:45:e0:a7:0e:b0:43:b2:b5:4d:60:c4:38:9c:35:e4:66:
         83:b6:eb:a1:a6:cb:ee:7b:60:62:14:d2:fd:c4:7a:65:7d:f5:
         cd:fc:57:e2:7e:ea:47:4f:e6:69:2e:72:1f:a0:2f:71:0a:d9:
         f4:c2:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:38:01 2025 by rpki-client