Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5212c01-48dd-3180-b7e8-07407f041a4f.roa
File:                     c5212c01-48dd-3180-b7e8-07407f041a4f.roa (raw, json)
Hash identifier:          UcVIo3ngkdBC+ErIuRdC6B1R1aUcIdAtTzDBqFAKqz8=
Subject key identifier:   50:24:E5:13:31:70:1F:10:37:F9:63:10:03:FE:08:FA:6C:21:36:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDDD9BA8AF90B3D72FC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5212c01-48dd-3180-b7e8-07407f041a4f.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     1008
IP address blocks:        2001:470:145::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:dd:d9:ba:8a:f9:0b:3d:72:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=9e74d924-f27c-4d7d-ac19-a0cb21254b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:e8:85:ef:c3:c6:7c:9a:fd:05:49:64:f8:
                    fc:f7:cf:45:fb:73:72:4e:dc:9b:00:cb:af:13:83:
                    a9:91:15:07:09:a8:9c:48:c7:72:b2:ba:c9:77:b7:
                    aa:de:73:46:a4:ca:9d:21:a9:e3:b5:f1:27:e1:a9:
                    52:63:a8:cb:fb:5c:40:f1:88:37:1d:3d:e8:ca:77:
                    2b:ca:83:5e:57:a2:41:f8:f1:58:86:ef:c5:6b:40:
                    3a:06:06:cc:e5:36:11:86:30:67:e1:b1:18:80:ec:
                    1c:5b:a5:3e:5f:3c:a6:2c:ff:1d:df:00:83:7b:50:
                    84:a1:8b:8b:3b:10:f3:4a:94:2e:1c:a0:8b:fd:c3:
                    e9:bf:81:73:bd:49:a9:08:e0:fe:cb:57:59:24:f5:
                    a5:77:cb:a9:57:2c:6a:2f:67:82:44:ff:d9:9f:59:
                    73:9e:c7:06:d2:11:e1:d4:83:d5:63:c7:56:6a:ad:
                    55:ad:47:d7:54:58:44:a6:ff:8a:25:80:e2:44:72:
                    06:80:22:31:29:15:af:03:e5:be:8a:3f:26:9b:f0:
                    2d:35:67:77:fc:67:a0:42:7c:7b:75:e5:95:de:3d:
                    c7:ce:a0:4c:bf:a3:28:08:eb:1a:6d:d2:1e:9c:90:
                    cd:da:2c:42:4d:83:e7:a6:fc:f0:74:a9:2a:ba:b3:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:E5:13:31:70:1F:10:37:F9:63:10:03:FE:08:FA:6C:21:36:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5212c01-48dd-3180-b7e8-07407f041a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:145::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:e9:4f:04:b1:7d:de:c3:4a:ec:e8:44:e5:c5:16:01:cf:
         f9:43:ea:33:4d:a9:73:9f:77:8e:b7:43:a6:8c:9a:cb:a8:28:
         fa:47:48:55:f6:be:5d:8c:68:35:04:99:5d:83:7a:c4:64:96:
         47:91:a0:93:02:00:46:c0:91:7d:63:57:3e:e5:fe:ca:12:ea:
         55:b4:ba:be:fc:97:b0:e9:d0:e1:c9:3a:79:cf:30:60:47:75:
         c3:06:95:00:e9:03:e4:79:6b:59:6f:ef:cb:98:e6:d4:b1:c3:
         52:df:f7:47:78:f0:7c:78:b5:d2:99:35:31:fb:ca:43:4a:22:
         cb:4f:c1:8b:94:cc:5d:d4:55:c5:2f:2f:cb:b7:40:73:e6:60:
         d6:cb:fd:7f:b3:19:61:0a:c0:5f:37:21:86:05:fe:ea:d4:34:
         e6:2c:15:fe:3c:6f:97:eb:54:8f:64:58:9b:5e:b3:de:25:89:
         d8:c7:d4:2d:f1:3c:fa:02:9c:cf:66:2a:78:c0:43:af:1f:6c:
         a9:12:cc:7e:47:7e:fe:2e:91:79:02:e3:ff:1e:33:a1:2a:b3:
         5e:e5:94:bd:24:d8:3c:f5:da:2d:8a:70:7b:69:6d:e0:fb:14:
         f2:8f:1b:ef:9f:ec:4b:60:59:01:66:69:88:9d:50:2b:60:13:
         f2:23:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:10 2025 by rpki-client