Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c012ed27-3604-3e00-9310-22248c6f7089.roa
File:                     c012ed27-3604-3e00-9310-22248c6f7089.roa (raw, json)
Hash identifier:          UE8IZkJTLUPk2lnAp4GqnA61453dKo51J/iggHCZqoU=
Subject key identifier:   8A:B8:09:D3:16:7F:FE:C9:FD:EC:3A:38:90:6F:2F:05:BE:AA:B7:BB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849A363111725003C6736AB6100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c012ed27-3604-3e00-9310-22248c6f7089.roa
Signing time:             Fri 25 Apr 2025 01:30:12 +0000
ROA not before:           Fri 25 Apr 2025 01:30:12 +0000
ROA not after:            Thu 24 Jul 2025 01:30:12 +0000
asID:                     59953
IP address blocks:        2001:470:44a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:63:11:17:25:00:3c:67:36:ab:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 25 01:30:12 2025 GMT
            Not After : Jul 24 01:30:12 2025 GMT
        Subject: CN=67cb03a3-6fbd-4699-9505-456fb2f42e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4d:d3:2f:3c:5f:43:aa:7c:b6:69:d2:99:52:
                    b7:f4:08:62:12:55:ae:5c:36:d4:79:56:77:31:9f:
                    2c:93:3e:26:91:23:80:d1:c2:df:27:19:c6:86:7f:
                    46:0f:23:97:ba:d9:c8:bd:a6:94:d9:f6:bc:c6:e0:
                    7a:f5:b4:48:37:3b:05:79:7d:f0:69:08:cf:6e:1a:
                    e9:3c:81:c3:f9:7a:c0:2f:3b:18:74:1a:8e:e2:09:
                    5b:61:f6:1f:bb:56:0a:b6:53:8e:1b:47:ec:17:b9:
                    14:8c:0d:b7:d3:e0:a8:ac:b1:50:ac:5f:19:d1:64:
                    2e:00:d9:f5:25:61:35:a4:57:ed:33:50:5e:7f:fd:
                    3f:f3:6e:72:04:e3:98:47:5b:72:e1:4b:f5:c9:db:
                    3b:a4:42:a3:b3:b2:c1:a7:4b:49:cf:69:03:44:44:
                    bd:81:0c:d1:7b:8d:f3:15:20:15:ac:d7:8b:ed:a1:
                    67:73:ad:8e:a3:f7:e2:b1:a2:c6:36:3f:23:d8:96:
                    a8:d6:0a:7b:38:94:f2:8f:53:26:fa:a0:24:c9:9c:
                    2c:e5:33:e4:33:e5:92:a0:e8:14:94:d5:02:43:04:
                    4c:3f:98:4b:c4:d8:17:86:9d:7b:4e:68:2d:1d:9d:
                    ad:0d:6b:d9:89:db:76:06:ff:5d:a6:dd:42:8f:ca:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B8:09:D3:16:7F:FE:C9:FD:EC:3A:38:90:6F:2F:05:BE:AA:B7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c012ed27-3604-3e00-9310-22248c6f7089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:12:61:b0:b8:c8:ff:ff:68:ff:eb:b5:2c:63:82:81:61:
         5c:e2:29:f7:f3:b9:99:14:a9:09:8f:8a:10:67:21:2b:92:13:
         88:37:4c:78:10:e2:4f:84:39:1b:b0:ac:c3:f4:dd:f3:36:61:
         e8:ae:3a:19:30:af:6b:bd:64:4b:49:fe:3a:f7:96:1b:0e:84:
         f9:bd:fd:23:2e:1d:85:c7:3e:4b:93:17:70:e7:c8:7a:91:2a:
         d5:7b:a4:5f:07:ec:f3:f6:08:56:99:bd:62:8d:8f:7e:05:40:
         4f:ae:02:80:c4:ad:c5:f6:a6:e9:45:ad:59:45:71:46:70:eb:
         98:78:72:9c:f3:79:bb:ba:be:3d:5f:20:9a:e6:0a:ba:54:e5:
         b2:49:3a:f9:bc:b1:ce:3a:01:62:61:2b:35:8a:fa:39:11:76:
         e4:9b:41:dc:27:99:3f:f7:2e:c1:d2:18:64:95:13:a1:fe:3d:
         01:94:fd:73:67:de:5a:4d:82:58:f9:b9:0f:03:2a:c9:ff:e9:
         ce:1b:d2:bd:f3:6a:47:86:f6:f0:54:fc:45:3d:49:52:d4:76:
         f1:20:c0:93:f8:82:ab:b9:49:4e:6e:0f:2d:3f:84:86:f5:ae:
         51:2f:60:cf:bc:da:d9:48:4a:cb:38:85:cd:80:33:2c:11:29:
         9e:94:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:08 2025 by rpki-client