Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa
File:                     4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa (raw, json)
Hash identifier:          91NcoeLQ5oD1XvRML5iIKI/sg5IonIBJbf+1AgVotkg=
Subject key identifier:   53:BD:33:30:CC:FB:BE:33:D1:1E:16:0B:10:92:8F:19:3A:4F:CA:73
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE5E5B30B073B8F274500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     134346
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e5:e5:b3:0b:07:3b:8f:27:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=275b7253-7449-43b3-b8c2-85e8b971d34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:02:1f:f1:da:c9:cc:6b:40:28:1e:92:b7:
                    c1:4d:24:6f:45:64:89:b4:8b:0c:96:2e:c5:ab:bc:
                    6d:93:da:19:17:99:9c:fa:61:79:a2:b7:6b:eb:e7:
                    a6:1a:cc:42:20:21:d8:9e:73:cd:46:89:a6:28:71:
                    72:69:c1:5f:86:42:65:64:6b:06:b8:2e:b3:b2:fd:
                    8f:99:e4:58:c7:98:1e:ab:e7:2a:08:e2:8d:92:4f:
                    56:02:aa:26:a8:ec:3a:60:0b:c6:f4:d3:46:49:7d:
                    a7:07:f8:d5:ff:5c:c0:43:c5:bc:ab:9d:d7:32:39:
                    7d:b2:6c:3f:13:17:48:f6:c9:6b:46:4e:60:3a:df:
                    40:89:27:00:b8:1b:8e:28:aa:9f:aa:cf:75:c5:8e:
                    8d:5f:87:27:a6:50:f7:41:78:b3:d9:a1:14:10:18:
                    c4:93:25:9b:03:1e:d4:2d:06:22:df:83:d9:4a:5e:
                    12:b2:2e:5e:d0:63:8e:77:59:35:5c:e6:5e:cd:0c:
                    4f:33:cd:de:22:3d:5c:3e:e8:98:14:d4:3e:25:64:
                    01:f3:83:5f:a2:19:ba:cb:55:12:19:0b:17:40:19:
                    60:c8:b8:f6:64:85:21:ae:bf:36:f0:7c:92:93:d3:
                    36:0d:c6:e2:1d:5e:84:6f:41:f0:7e:aa:d3:3d:31:
                    fb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:33:30:CC:FB:BE:33:D1:1E:16:0B:10:92:8F:19:3A:4F:CA:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d753108-f9f6-3d89-8f18-a1e2e100cfb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:df:d1:54:f8:db:03:68:92:46:15:46:45:3a:af:6c:8c:
         5f:5c:a8:61:ca:c3:bf:85:09:02:ae:38:ac:10:bb:f0:96:16:
         19:08:9f:26:21:ee:08:35:8d:ad:31:63:34:8d:cb:10:ad:27:
         66:42:d6:47:7f:05:4b:07:94:e9:b4:1a:21:bb:0e:77:23:db:
         b7:1e:e6:d2:43:c6:24:f5:f6:a5:32:7c:82:4a:a2:54:f3:48:
         b7:26:08:60:3a:47:ae:ba:39:bb:be:02:36:44:2a:c7:53:a0:
         67:35:ab:79:66:79:4c:96:82:97:d3:93:b8:dc:68:11:9e:d2:
         f4:b2:3b:f6:5b:91:2d:1d:43:bf:67:ff:c7:d9:c5:2f:f7:b4:
         d7:f7:4b:d4:7d:54:5e:7e:a9:61:6d:dc:ba:2b:68:88:7f:de:
         28:03:03:b1:6a:e5:5d:d8:75:ff:b5:71:be:75:09:4a:72:a5:
         70:c7:6b:9c:64:fe:42:3d:b9:45:1f:26:55:b7:2d:ba:50:0b:
         d7:d4:f5:c1:47:29:60:0f:9e:63:98:19:db:9f:e6:7e:10:e0:
         97:dc:54:a5:c5:f2:6d:8d:70:d2:7f:8d:f7:67:1a:35:01:18:
         c5:60:4a:af:a7:25:2b:64:04:83:d4:b4:f5:75:0a:c4:36:fb:
         fc:4b:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:11 2025 by rpki-client