Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d010be-588f-30f3-ba87-d4415c39c192.roa
File:                     47d010be-588f-30f3-ba87-d4415c39c192.roa (raw, json)
Hash identifier:          M13D1frb8n/VyhQ+sovouhLq1w9vM6D2V9k3qF+YTu8=
Subject key identifier:   06:A4:61:0B:4B:BF:D5:75:B8:1B:53:7B:E5:E2:C5:50:C0:17:F4:1D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AADF0F3A76BE0656E1886BEE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d010be-588f-30f3-ba87-d4415c39c192.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     54502
IP address blocks:        2001:470:461::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f0:f3:a7:6b:e0:65:6e:18:86:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=db59233a-9674-4574-952c-bab07bbb5b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:e5:20:71:f3:e7:d6:13:63:fb:13:e5:a3:
                    ab:44:a7:b3:9a:b0:be:6d:8f:13:9a:cf:49:4e:75:
                    5e:2a:d1:da:8a:59:6f:20:4d:f5:e7:1a:54:0f:5c:
                    70:81:72:7a:87:bd:65:62:66:f1:43:a1:52:55:98:
                    0b:d2:79:4e:54:e9:b2:00:02:1e:93:1d:3e:dd:89:
                    de:70:38:62:33:fb:f9:7b:a9:3b:63:52:1b:aa:a5:
                    f4:98:bf:62:f2:fb:3b:a4:78:2e:07:f2:b0:d5:63:
                    eb:aa:fa:78:33:70:10:6f:7f:a0:81:5b:dc:e4:7c:
                    b3:83:1b:c5:98:42:29:26:4f:ce:42:af:b5:e1:cf:
                    3c:8b:de:8c:14:be:ea:f3:80:76:f7:b6:61:b4:f4:
                    4a:26:29:9a:96:3f:d4:d2:91:23:78:76:be:71:66:
                    72:63:af:01:f6:40:dd:fb:29:79:3e:b6:81:7d:6c:
                    91:c5:f3:08:cd:74:65:32:32:6b:2d:ac:dc:ca:c6:
                    82:4d:5a:69:0b:fd:f8:0e:6a:6e:01:99:35:b4:e2:
                    95:69:99:2a:8f:ff:50:7d:9e:da:1b:7c:80:83:62:
                    5c:60:f0:c7:c6:af:b7:be:52:9d:99:3f:ad:ad:6c:
                    13:e6:36:d9:6b:a6:f5:25:88:17:bf:e8:4c:99:47:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:61:0B:4B:BF:D5:75:B8:1B:53:7B:E5:E2:C5:50:C0:17:F4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/47d010be-588f-30f3-ba87-d4415c39c192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:461::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:13:fd:9d:46:37:05:47:04:63:88:c4:c4:c6:c2:62:ab:bd:
         b7:0c:a5:57:16:15:e7:b0:cf:5a:4f:0a:22:ac:50:25:a5:cd:
         a7:57:48:e2:e4:4f:ed:d9:c4:86:d0:eb:8d:5f:76:3e:61:3d:
         3a:f4:b5:78:eb:3a:4a:fc:ae:be:48:ee:37:77:6c:a6:96:7c:
         a3:0e:15:21:b5:cb:da:eb:79:ae:f3:c1:24:0a:46:36:07:be:
         7a:fe:d4:1d:85:f4:10:cd:d2:5d:35:00:5a:fa:67:5a:a1:6a:
         91:16:63:ca:df:f2:1c:a2:3b:3d:fd:30:96:81:f6:83:f5:d2:
         37:56:75:37:4c:95:33:3c:35:5d:d1:e5:5d:44:04:9d:e2:03:
         94:64:36:a9:76:3c:88:b9:12:64:25:c2:ee:8b:b0:51:1e:b2:
         16:66:7f:30:39:ef:6b:b4:a6:6b:35:51:af:19:f6:23:0f:71:
         db:4c:b1:e8:72:5a:a1:30:27:44:8f:f0:14:bb:60:28:fb:f9:
         6a:b9:2f:1e:23:c3:b4:35:5d:93:1d:f5:5a:5c:9d:e4:b2:47:
         ed:0e:30:ff:cb:2f:68:b4:ae:0a:17:b8:b8:f9:9a:ca:db:d5:
         56:30:54:14:85:fe:64:00:bc:7f:00:31:ae:b0:f6:f2:ab:a2:
         dc:39:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:09 2025 by rpki-client