Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa
File:                     c8e3155a-cda7-369b-bd52-09077eb2faa8.roa (raw, json)
Hash identifier:          U/Kk4xYSVuySEfSgO+vnaSVVfhEkKxaihzbYsw+5y4k=
Subject key identifier:   29:0F:48:5C:A4:AF:97:82:DA:A2:23:AE:D1:A1:9A:B1:7B:28:92:4F
Certificate issuer:       /CN=633665d1-105e-4258-8cc6-d23d617ef3cf
Certificate serial:       010D0C9F43285849C20A10EC82D06EE599DC1B80
Authority key identifier: 28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     33470
IP address blocks:        2604:d200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:10:ec:82:d0:6e:e5:99:dc:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633665d1-105e-4258-8cc6-d23d617ef3cf
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fc31c9b1-ec3d-47fc-822c-af2e4910bc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:48:c0:5f:f3:b7:3d:9d:35:1c:47:4c:64:
                    1e:9a:11:5a:fe:23:38:7e:ab:13:37:cb:af:34:8b:
                    26:02:c4:9c:d2:da:a4:ac:6a:42:b2:ed:77:89:d6:
                    8e:13:fb:d5:d4:78:bd:6a:23:f7:09:90:fa:fb:43:
                    af:fb:b1:90:92:96:6b:63:fd:21:f8:51:b8:2a:7b:
                    a1:0b:34:ed:f5:1d:d5:c6:7b:4c:2b:3e:00:bf:59:
                    e1:53:7a:a1:7b:bf:e6:bc:d4:1b:4f:66:0b:91:6f:
                    82:c1:2c:a6:47:a6:6b:d1:e1:6b:4d:e8:ed:bd:f2:
                    dd:78:63:d4:6c:06:b4:b4:9d:cf:5c:83:c1:46:18:
                    89:74:60:6f:7f:ac:68:49:3d:63:43:86:13:a2:ec:
                    fe:8f:be:b0:6e:91:b2:8f:b8:81:44:13:6d:a2:4f:
                    17:b5:5e:13:9f:d1:ff:84:d4:01:fe:cb:3f:e8:63:
                    b9:b2:7d:54:f1:9f:dc:a1:e1:0f:6c:02:ad:bb:3b:
                    98:d0:2a:6f:15:78:e0:d6:a2:9f:cb:b9:8f:76:b3:
                    29:9d:f4:83:5c:49:bf:89:f5:28:50:36:0c:cf:21:
                    ff:c9:26:c6:ad:30:11:cc:8b:86:15:50:ee:c7:33:
                    98:11:3e:79:fe:67:33:e5:23:ba:94:71:82:c4:94:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0F:48:5C:A4:AF:97:82:DA:A2:23:AE:D1:A1:9A:B1:7B:28:92:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/c8e3155a-cda7-369b-bd52-09077eb2faa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf/633665d1-105e-4258-8cc6-d23d617ef3cf.crl

            X509v3 Authority Key Identifier:
                keyid:28:E6:44:7C:71:D9:6A:E2:E4:4B:D0:2C:91:32:FC:81:96:1A:0C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/633665d1-105e-4258-8cc6-d23d617ef3cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:b8:68:f4:fc:89:45:d6:89:7a:c5:a9:db:cc:2c:db:51:76:
         07:15:0f:a0:43:77:17:61:3f:30:cb:3f:12:23:d6:09:25:b5:
         08:e6:22:17:3b:66:5e:03:d4:d9:11:7b:7b:9f:2d:11:0e:28:
         ec:1f:d4:89:e5:d0:38:63:7f:fb:56:ba:e7:c2:60:0a:fc:2b:
         bd:cb:42:d4:79:e4:d9:22:e1:48:01:cc:6d:7e:3f:ff:85:4c:
         ff:e3:8c:ac:c8:ce:64:5f:60:98:c1:72:6e:f7:ff:9f:71:1a:
         ae:3b:3b:d4:ec:3b:8e:57:a9:8f:31:a4:79:f6:d7:1a:c7:99:
         98:59:63:18:47:e6:c7:7f:88:83:ec:f8:41:23:ab:00:a1:0f:
         a5:10:7c:79:01:f8:e6:08:56:42:53:74:c9:55:b5:bd:d3:84:
         6c:42:fb:c1:69:5c:46:bf:25:da:de:3d:59:f1:3d:75:fc:02:
         b5:0d:67:f2:b9:b3:af:78:43:c9:e5:35:ed:5e:8e:1b:50:90:
         49:eb:39:06:94:28:5d:38:27:a9:43:04:fa:e2:2c:e1:e8:c9:
         f1:d9:26:3c:ca:81:12:66:6b:2e:d5:00:c9:05:fa:0d:99:9a:
         75:81:19:48:5e:34:80:5e:51:36:dd:d6:84:06:c2:4e:04:ec:
         95:47:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:17:16 2025 by rpki-client