Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3410dcb3-0125-3941-aa44-e4532d16fcd1.roa
File:                     3410dcb3-0125-3941-aa44-e4532d16fcd1.roa (raw, json)
Hash identifier:          g3thnDtGRSdtYgRucAiXrfggw+MTNBGieh1PoURTbmM=
Subject key identifier:   67:B4:E3:75:C4:FC:20:FE:F5:77:9D:13:D7:24:47:1B:BA:ED:11:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB53DDC375808877210C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3410dcb3-0125-3941-aa44-e4532d16fcd1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     6165
IP address blocks:        65.49.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b5:3d:dc:37:58:08:87:72:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3593865d-13d1-4e83-ac7a-eb5edc14a959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:53:07:9d:6e:73:ea:60:fe:b9:62:b8:67:98:
                    51:7a:0e:6c:56:e3:76:86:84:0e:b3:98:f7:ee:23:
                    d5:a0:c7:af:95:47:14:cf:ac:21:33:37:bc:5b:7f:
                    ff:99:bf:03:de:07:44:fd:a7:c6:8b:9b:a9:ad:dc:
                    1d:c0:23:fa:77:46:98:e5:58:17:81:9c:56:34:58:
                    8b:05:61:1b:7a:f8:28:98:db:a1:e6:d9:6b:0b:d0:
                    6f:ac:09:10:3e:fb:5b:e9:04:d6:10:d2:40:0c:ab:
                    ec:91:1d:1e:3b:a9:83:90:6b:5e:d9:aa:43:af:46:
                    dd:a2:01:fd:b6:22:c3:2e:62:10:cb:0e:15:5b:bb:
                    43:d4:aa:68:43:ea:ed:a9:21:77:6b:d2:a2:1b:53:
                    a0:14:21:c9:9f:31:c3:ca:ad:ba:98:8c:4d:92:c2:
                    76:cc:c8:51:99:ed:89:01:4e:18:f8:b5:01:60:32:
                    6d:3b:f6:b0:fa:21:ff:2c:b7:22:36:fb:cb:f6:6a:
                    b8:b1:73:80:24:4d:a4:f6:a0:e2:26:52:c3:2a:6e:
                    8d:22:02:f5:7a:31:83:c4:2a:95:74:b4:00:e9:46:
                    77:7f:6d:fd:8d:25:20:80:c4:de:e1:9f:23:b7:b6:
                    93:ba:6f:ff:25:42:f9:59:72:6a:e7:ea:02:8c:11:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B4:E3:75:C4:FC:20:FE:F5:77:9D:13:D7:24:47:1B:BA:ED:11:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3410dcb3-0125-3941-aa44-e4532d16fcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:24:f8:95:74:f2:f8:ff:60:2a:72:5a:0a:38:7d:ff:c3:b6:
         0c:85:f1:dc:1d:1a:24:f5:8c:a6:10:9c:52:0f:10:32:65:b2:
         49:5a:85:1a:29:be:4c:f7:d4:af:03:de:31:99:88:b5:ec:d5:
         cd:dd:6a:03:2f:14:d1:1a:d3:54:4e:65:bb:5d:e7:e7:9e:ec:
         ef:06:b9:2f:73:93:a3:02:01:21:15:1b:89:c0:22:d8:65:f0:
         a0:3f:c3:40:8b:42:3c:2e:19:29:f5:2f:a1:d5:eb:e2:56:fa:
         23:b2:5a:bf:ba:55:f6:7e:2b:66:a1:20:b1:02:ad:8c:27:04:
         dd:99:88:18:9a:e8:1c:84:ea:9c:3b:6b:4a:33:db:0b:31:b7:
         db:d4:d9:2d:e6:32:e1:b8:05:a3:5f:39:0e:de:de:ee:fb:4b:
         4a:82:fc:55:2f:b0:14:e7:f3:91:c0:33:9d:e7:b9:06:58:b4:
         0f:37:ff:7d:60:69:3f:9d:c9:59:75:6a:9a:75:a9:67:7a:9a:
         37:4c:f9:2c:47:ae:09:81:63:af:b5:ed:e9:ec:6e:d3:fe:25:
         45:d3:c2:2c:16:a6:a5:56:b7:0b:45:8b:19:30:30:ec:f3:b9:
         c3:d8:1e:00:48:3f:e8:f3:69:8d:bd:53:32:ea:5d:0e:ba:0e:
         39:61:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:53 2025 by rpki-client