Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640fbeab-05b9-3a88-9c89-be2dec018314.roa
File:                     640fbeab-05b9-3a88-9c89-be2dec018314.roa (raw, json)
Hash identifier:          1VY2RtUZWxj9ei2543TDqWIVKQfPmopGYo7X77f0WpU=
Subject key identifier:   F0:F7:AB:CD:AC:E1:DF:22:95:80:92:45:0D:3F:92:D2:F0:B5:4E:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849E224FEEC0196965652012440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640fbeab-05b9-3a88-9c89-be2dec018314.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     56229
IP address blocks:        2001:470:41c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:24:fe:ec:01:96:96:56:52:01:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=015c202d-1584-45a1-a3ff-2eb775b62d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:6c:a1:0e:53:c5:53:4c:1d:d6:93:1d:4e:
                    aa:26:9b:78:4f:be:27:a1:ba:a6:9b:f5:d9:ae:b7:
                    8a:6f:e2:c9:42:3e:3b:2f:f9:8a:57:23:43:2a:44:
                    bf:1f:e6:f8:e2:d9:3e:48:4d:a4:72:95:d1:e9:84:
                    e0:13:70:6a:79:d4:32:7e:fb:63:3a:27:88:2b:07:
                    b2:25:b2:35:d0:99:5f:cc:52:8d:9f:d5:7d:2f:95:
                    f1:07:76:32:c8:d0:7a:85:eb:fc:e7:e5:13:c2:55:
                    4a:d2:30:29:8c:62:46:bd:8e:06:7f:d0:5a:5a:34:
                    7c:cf:e1:63:76:0b:f6:36:3c:08:f3:d4:f5:90:81:
                    07:d7:9d:78:f2:3c:00:f8:06:1e:70:a3:bc:58:f8:
                    09:32:c4:a2:67:31:5f:73:e3:65:92:2f:67:4d:dc:
                    4f:d5:1e:f1:2b:53:43:03:5e:e3:17:2f:8b:cf:77:
                    68:e9:a1:61:1e:a0:e9:f9:88:b9:8d:81:6b:73:37:
                    cd:2f:c3:4b:a2:5d:ba:92:ea:7f:07:83:3a:3e:73:
                    25:9a:0c:bb:b7:63:1d:1e:cc:06:e0:61:fe:f6:9b:
                    7f:08:90:d6:3f:09:33:4b:c5:89:d4:f3:fb:a7:fb:
                    c8:bb:ee:2a:f8:09:1f:53:22:7b:87:11:c3:3e:88:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F7:AB:CD:AC:E1:DF:22:95:80:92:45:0D:3F:92:D2:F0:B5:4E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/640fbeab-05b9-3a88-9c89-be2dec018314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:41c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:4d:af:de:91:75:c1:3d:d4:1a:66:ae:d6:63:d8:ee:66:
         4c:4c:4a:6d:c5:2f:94:c9:9e:37:dc:c9:9e:c8:f7:e1:91:17:
         12:45:82:bb:81:a0:03:6c:4a:04:26:18:f9:18:f0:c3:eb:90:
         87:24:3c:ed:80:20:52:f6:4d:ff:4c:9d:59:c0:a4:2c:2b:e9:
         75:b6:97:05:11:f2:b8:da:51:11:f6:cc:5e:03:5b:01:27:71:
         e2:8d:df:8b:02:d9:29:43:0f:7d:62:f2:2d:9b:2e:08:77:34:
         c9:e2:76:59:79:09:b8:30:b2:c2:20:c0:8b:30:67:98:5e:4a:
         1a:cd:f4:c6:f0:41:c0:bc:f7:a0:15:c0:ae:62:94:a8:b7:e4:
         7c:7e:64:72:88:9a:39:ba:87:e1:c6:ab:d0:dd:2c:81:4a:98:
         1f:30:78:6d:e2:f2:88:81:ea:66:80:cf:d1:4a:d4:3c:c2:89:
         67:be:00:5f:c1:dc:1d:d8:c6:0e:aa:9f:70:e5:1a:2c:62:c9:
         d8:32:30:30:a2:6b:9d:67:32:70:e9:ff:c8:ad:40:07:4e:97:
         cc:41:61:1d:6c:7d:45:e2:26:f3:d1:4a:9b:8f:a6:b6:da:e7:
         a3:80:fb:2a:bd:99:94:1b:1d:7e:9d:a1:59:61:08:28:db:6a:
         bf:78:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:12 2025 by rpki-client