Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d5c2dcb-9a85-397c-a441-2d0188a65327.roa
File:                     6d5c2dcb-9a85-397c-a441-2d0188a65327.roa (raw, json)
Hash identifier:          p7y8SRF9pilBSNBT1fG8BVhGU5D6pkk5ITO2U5nHDiE=
Subject key identifier:   E8:F6:02:2A:92:F6:AC:B1:E8:12:A2:E3:03:BA:B2:47:5B:64:98:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A1B6E75923B8F872D48D77A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d5c2dcb-9a85-397c-a441-2d0188a65327.roa
Signing time:             Sat 07 Jun 2025 01:30:09 +0000
ROA not before:           Sat 07 Jun 2025 01:30:09 +0000
ROA not after:            Fri 05 Sep 2025 01:30:09 +0000
asID:                     16582
IP address blocks:        2001:470:1e2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:6e:75:92:3b:8f:87:2d:48:d7:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  7 01:30:09 2025 GMT
            Not After : Sep  5 01:30:09 2025 GMT
        Subject: CN=58a4326f-bda1-41bb-add9-78b90f01c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:2e:7d:5d:a5:87:41:e8:dd:1c:cb:da:05:
                    79:07:e9:40:9a:4a:53:eb:2e:14:31:7e:c8:3b:29:
                    2a:9a:19:01:0c:72:d9:f6:dc:c5:13:c0:ea:8c:d3:
                    7f:f5:46:0d:ce:f0:01:ed:fc:e2:af:45:c3:e9:b2:
                    1e:a7:ac:e3:14:e4:00:5b:54:d8:47:e1:6c:1e:9a:
                    25:43:a3:0e:d6:af:09:9b:fd:a7:cf:2e:66:40:71:
                    7b:f2:0f:20:d6:a5:ee:9f:f6:00:3a:45:e8:54:33:
                    13:80:f1:cf:63:2d:fb:a1:dd:64:8a:48:e2:2b:38:
                    7d:8b:a9:82:0e:58:67:85:78:53:54:d7:4a:6f:cf:
                    16:30:c8:d0:18:24:17:8a:9d:86:cc:33:1b:e1:39:
                    ff:0d:86:e0:1e:db:ab:7f:ea:f1:23:b2:f0:cb:1b:
                    e6:53:f5:af:67:da:5f:e1:5a:ed:32:97:73:7e:40:
                    be:45:b2:ed:e5:09:c1:86:ed:47:85:d8:ce:fc:19:
                    6d:5b:8c:39:3f:25:22:16:b3:a1:c3:29:28:90:cb:
                    c4:0e:1a:37:88:f9:50:ce:c2:fb:82:e8:45:93:42:
                    71:c2:ae:a2:04:b4:d2:d9:b3:8b:2c:12:80:af:13:
                    83:2f:ad:a1:98:88:22:fa:26:42:8d:88:63:95:60:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F6:02:2A:92:F6:AC:B1:E8:12:A2:E3:03:BA:B2:47:5B:64:98:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d5c2dcb-9a85-397c-a441-2d0188a65327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:75:e2:8b:d9:ef:49:0b:27:43:3b:64:07:f1:8e:03:19:01:
         8f:09:f1:47:b0:3e:8b:52:3a:a4:6c:96:13:01:22:49:8b:c5:
         70:1c:83:75:97:17:9b:09:b7:a2:52:28:b4:90:45:87:99:1f:
         f5:4c:0d:f6:12:e3:a5:ce:a7:41:83:bf:fb:ae:9e:04:3a:d2:
         4d:03:6b:2e:d9:e1:68:39:a3:75:fc:2f:4e:1b:fa:9b:3e:66:
         b3:25:ae:79:7f:ff:1c:50:f4:b4:ce:3b:76:c1:6f:6c:38:0d:
         78:12:c5:56:9f:ba:01:04:0b:34:32:b9:f3:25:11:8c:f3:95:
         7a:38:f2:8a:e6:8c:43:5c:80:fc:ff:78:cc:18:b0:27:27:7c:
         a9:96:bc:77:1f:7a:80:28:4c:27:43:30:ad:6c:f8:28:b2:84:
         06:44:45:e3:f0:4c:b5:85:6b:dc:78:56:5f:31:80:30:e7:7a:
         cf:50:ab:ba:95:73:de:e8:e2:0f:48:64:cf:47:c5:a4:4d:85:
         df:64:ca:67:04:63:70:82:d1:32:e6:bf:ee:fc:a6:35:43:6b:
         75:b6:83:b4:a2:fd:81:de:20:de:89:3f:0e:c1:e1:9e:a9:cc:
         3a:12:f9:4d:60:2d:45:03:34:ac:7c:9c:d8:ef:10:ae:53:57:
         af:b0:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:07 2025 by rpki-client