Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa
File:                     9bba28d1-1f66-3411-a1e8-0ea918076404.roa (raw, json)
Hash identifier:          qvrhIyi8VCvZteaFuh6OoTmgkJPLSHuvqE/M08ACIOY=
Subject key identifier:   61:9F:0A:49:2D:55:99:04:9E:37:B4:EC:23:FF:36:71:6B:CB:02:64
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE627D726CE2C987C7760
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     11123
IP address blocks:        2001:470:17e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e6:27:d7:26:ce:2c:98:7c:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=f6181f3a-68ca-46b9-b093-bd4b18224500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:23:d3:5e:d4:4e:e1:74:57:11:40:17:96:
                    b7:8f:4d:89:27:9e:9a:13:4f:d3:8c:cd:81:02:1e:
                    a4:63:a8:0b:dd:18:5e:fd:f7:fd:ce:af:89:a6:af:
                    72:a7:10:19:da:d9:71:5e:80:8d:e2:7d:ab:b2:81:
                    60:39:12:9e:c8:20:e4:89:7e:1d:fe:e4:2b:d3:f1:
                    83:a6:77:77:fc:3c:b3:94:c1:69:f2:05:28:4b:88:
                    6c:84:36:98:d5:eb:02:1a:4b:b7:2f:a2:40:42:ad:
                    20:16:38:3f:a2:f8:b4:cb:16:63:5d:0a:5b:77:3a:
                    82:52:09:90:93:4d:7d:8a:1e:b9:f1:34:b1:db:5a:
                    e3:86:2d:c4:30:ee:27:b5:1d:66:d9:22:b7:99:f0:
                    92:dc:77:7a:6e:08:7c:f3:9c:e0:8f:fa:49:cb:5a:
                    34:9c:15:f6:8f:58:cd:80:bf:df:40:ac:7c:78:9f:
                    00:69:4e:31:41:5c:fb:13:bb:b0:33:c4:c3:38:d1:
                    85:71:94:51:37:dd:e9:be:06:cb:a4:74:e3:c3:25:
                    a3:d8:a6:ad:a7:c7:04:84:cc:cb:8b:19:c5:81:86:
                    7d:09:a8:5e:84:69:f3:f0:4d:d7:fc:5f:5b:a0:16:
                    91:d0:24:0d:5d:1a:45:57:e5:63:15:06:51:fa:bc:
                    2b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:0A:49:2D:55:99:04:9E:37:B4:EC:23:FF:36:71:6B:CB:02:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:17e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:25:af:e8:0c:23:b8:4b:65:c7:ed:d2:5e:a0:8d:3d:87:
         52:ce:ff:27:d1:87:6b:c2:2d:fe:30:fd:1a:53:59:c9:18:9f:
         c3:21:5c:c4:20:19:54:7f:0b:21:30:78:42:19:bd:32:7b:67:
         5e:0f:fe:fd:64:cf:87:53:60:5a:cc:47:d0:a8:5a:79:fe:d1:
         7b:a7:56:29:64:2b:55:42:d9:dd:88:86:f7:bc:b2:f9:52:62:
         d6:1f:6c:ef:d2:32:98:e1:01:46:9e:ed:e9:bd:de:77:4f:05:
         43:98:ec:be:f5:37:85:05:79:d9:d4:cb:ad:d9:46:b0:5e:7c:
         11:6b:33:78:51:42:2f:46:6a:52:a4:86:e3:6e:e4:f7:a7:e1:
         92:8c:1d:b5:5b:36:71:39:79:3a:96:d8:e9:78:e1:ff:13:a4:
         87:be:8e:05:12:56:04:fe:ed:25:48:81:a4:97:6c:18:7d:cc:
         36:a3:2c:f8:b7:58:a7:21:7c:b7:a9:23:f7:a4:69:aa:9b:da:
         c1:55:65:6c:1b:3a:78:35:23:67:ce:d4:ac:80:14:30:fa:3c:
         35:c8:2d:0b:5c:0f:7b:c4:68:4e:85:dc:84:13:ac:1f:49:29:
         66:d3:1c:40:94:63:6a:c2:9c:ba:8f:99:65:da:f5:46:f4:9d:
         e3:56:c9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:12:40 2025 by rpki-client