Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa
File:                     ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa (raw, json)
Hash identifier:          yzBCk9falHTXiKoAY91nY+Cuu8bGtIK28RthZR2k8eI=
Subject key identifier:   14:65:45:46:7B:A2:71:94:DD:05:5F:B0:14:37:E8:46:BF:D4:FA:3C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858496A198EC67FB84EA25EF41700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     400661
IP address blocks:        2001:470:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:8e:c6:7f:b8:4e:a2:5e:f4:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=f5c9a92e-d175-483c-99e7-e8fd8cf46c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:8f:bc:4b:0e:45:aa:3c:8b:95:4a:37:93:
                    87:d6:d5:92:f1:c6:a8:e1:bb:90:bf:55:dd:e8:eb:
                    3f:45:b3:25:a1:e5:25:86:85:19:32:f9:df:4c:86:
                    f8:db:1f:31:63:ca:cc:a4:60:2e:9f:35:50:fe:28:
                    70:ba:fd:39:17:cd:9d:4a:4c:76:dc:e8:91:6a:7e:
                    b0:b2:ce:81:36:82:ef:7c:21:9e:4b:9f:ff:98:95:
                    37:dc:d7:bd:fd:73:b0:09:20:34:56:40:7b:f8:f3:
                    ec:24:29:5a:b2:1e:fe:ba:bb:cd:46:47:5b:9e:54:
                    1e:f2:83:3a:5b:30:ce:46:e1:26:24:6f:4e:d8:00:
                    ee:e4:7c:48:85:47:c8:d6:21:39:c5:1d:2e:85:a7:
                    b5:80:a2:c0:ca:09:5b:8b:70:58:99:6d:dc:bd:1d:
                    9e:07:61:90:ac:1a:88:5d:4e:ce:2b:a5:4f:67:de:
                    b7:c6:b5:d6:9d:3b:4f:51:86:9b:5f:41:fc:3e:0f:
                    c6:4f:f6:30:6e:53:5b:ed:89:86:71:e4:08:94:fb:
                    47:12:aa:5e:81:24:aa:cc:c0:4e:fc:e4:28:49:2f:
                    13:86:a6:dd:77:57:f3:eb:50:00:8a:39:3b:27:c6:
                    25:b1:e9:b4:99:1e:51:26:38:56:1a:78:1a:08:3a:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:45:46:7B:A2:71:94:DD:05:5F:B0:14:37:E8:46:BF:D4:FA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:1f:7c:97:f0:da:a5:3a:a3:85:9a:0d:20:18:09:45:48:
         89:cf:bc:b5:bf:9c:a6:ad:7e:ec:04:34:f3:34:da:48:39:dd:
         b3:b3:a2:0f:bc:91:1d:c3:db:6a:3c:c0:b3:99:5b:14:c0:52:
         4e:ab:d9:86:e1:7e:bf:89:dd:14:41:bc:80:30:3c:df:a6:6c:
         de:1f:23:b3:ec:a2:1b:92:58:2d:b8:c8:d6:84:3a:38:e6:0b:
         dd:cb:69:48:f3:c3:09:36:31:57:4c:e6:d5:d8:35:51:86:ab:
         d1:62:87:cc:6b:0d:06:b2:da:4d:10:0f:e8:4c:fb:ef:6b:85:
         41:1e:e4:4b:59:59:27:63:ad:f2:33:cd:74:2d:fa:3b:69:05:
         cb:10:8c:56:e2:87:77:10:e9:c9:be:7c:1d:0c:b5:00:04:dc:
         a5:5f:70:d6:55:d6:44:8b:cd:e3:45:7b:05:bf:ea:16:e8:dd:
         43:e0:32:ad:b1:0b:66:b6:77:ed:27:24:fa:8f:65:31:cb:ee:
         a0:6c:e0:9c:2f:b7:fa:9e:7c:4d:6c:00:92:1d:0c:d5:c4:f6:
         23:d6:a5:6f:61:53:d1:52:dd:4e:d6:9e:a8:56:32:2b:ac:0a:
         c2:ea:48:a9:ae:62:03:47:b7:b4:4f:49:16:8b:b2:5f:fa:7e:
         61:68:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:11:43 2025 by rpki-client