Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa
File:                     b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa (raw, json)
Hash identifier:          riTiBABVyBTKqOXHsjcwCuxjUUPV9Ttt0Vjfe8Aqa4I=
Subject key identifier:   F0:FE:8B:63:95:C1:C5:CB:D9:3F:AA:D6:A8:4B:42:A6:EE:9A:CF:5E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB26F0FB9AE3515712180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     12266
IP address blocks:        2001:470:68::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b2:6f:0f:b9:ae:35:15:71:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=58e5d3a0-d5aa-469c-abbd-f674b20d3afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:e0:55:04:f9:9c:43:4e:2b:c1:74:18:1c:
                    86:7a:88:3b:7a:d0:97:13:b2:be:c8:98:95:08:1f:
                    70:10:50:ad:41:07:71:e4:e6:c5:93:43:b1:cb:46:
                    fa:96:a9:ce:f2:5a:9a:0f:98:55:2d:31:0e:d3:71:
                    f9:c6:17:3f:27:cc:ba:c9:50:f0:fc:d8:5b:e6:f4:
                    89:4c:3b:4e:64:63:06:76:d1:73:30:3b:70:9c:8d:
                    11:d2:69:0a:54:88:73:5a:17:a7:d4:52:13:fa:10:
                    cf:19:18:13:71:25:00:31:3a:63:47:7f:4c:58:ef:
                    e1:05:26:48:d0:c6:71:23:a7:ba:75:24:f2:9c:d5:
                    ae:02:8d:d7:83:72:9f:2a:bc:61:f4:2c:7b:10:3a:
                    cc:78:b4:21:5d:a4:cf:ea:54:b3:f1:54:1b:83:52:
                    75:dc:b0:49:e2:f8:97:38:1c:8d:07:21:36:32:90:
                    39:7e:d2:13:35:fa:c1:ff:a9:33:0e:2c:5d:de:c8:
                    2e:be:dc:c3:55:c9:6a:e7:3a:35:63:91:ab:24:5a:
                    c7:fb:a2:88:80:a1:74:2a:8f:0e:50:ab:3f:21:ef:
                    e0:08:01:04:2b:7d:ce:0d:11:ee:53:4b:91:06:e6:
                    41:1e:f1:ec:01:3e:d6:40:fd:eb:21:2f:79:1b:31:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FE:8B:63:95:C1:C5:CB:D9:3F:AA:D6:A8:4B:42:A6:EE:9A:CF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b13adc0f-bd07-369e-8093-86bd80bbd1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:68::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:43:49:66:06:5e:df:18:96:ad:44:8e:cb:f9:47:24:f4:d4:
         31:c0:ed:22:5a:cf:df:d3:3a:01:7e:26:69:6b:e3:48:5c:30:
         3a:7b:8a:da:6a:18:32:22:f8:5f:b2:1d:cc:e1:5b:4e:c5:e1:
         3c:27:ab:80:5e:d0:e3:a3:b2:4c:d5:56:e4:cd:1a:6b:22:bc:
         f6:84:db:f4:0d:89:21:17:e8:da:45:33:73:d8:2b:e9:29:3d:
         d1:d4:bd:6b:33:bd:05:89:9b:d2:fe:71:7a:96:f8:3c:60:33:
         af:88:2c:be:c2:62:61:a4:5f:34:76:76:5e:7b:ce:21:da:b3:
         50:19:8a:a1:cf:39:82:62:29:9a:a0:99:60:a8:c0:9e:13:a2:
         d8:ab:ec:8e:d8:7b:7c:83:12:b9:52:b9:d3:fc:e6:4e:d5:23:
         9d:8f:e6:78:3e:9b:33:b5:7f:b7:0f:a0:83:eb:f0:bb:9c:2c:
         42:4b:24:9a:e5:fb:39:c7:dd:92:63:c5:60:12:3a:04:d2:ea:
         c0:c8:67:c3:e4:ad:fa:a7:38:5c:8b:f6:22:c0:19:25:d5:cb:
         cf:29:b1:4e:6a:e9:6d:7c:08:81:d3:6a:3f:18:2a:45:95:ec:
         aa:97:40:4b:fe:ae:47:41:d6:ff:e7:d8:1f:c0:d8:72:93:4d:
         32:86:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:22:26 2025 by rpki-client