Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa
File:                     aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa (raw, json)
Hash identifier:          JX4WR8W6BvWsXA2bzFUsBlEnS3xfeqpxdN1v0kMC4mc=
Subject key identifier:   AF:3A:3D:18:17:09:9D:02:D1:B7:96:22:7A:D4:B9:35:56:77:80:2E
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A15D3FD2ECBB460AEFE00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11164
IP address blocks:        2001:468:f0ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:15:d3:fd:2e:cb:b4:60:ae:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=a926cbce-1eb9-4068-a147-77b73cfc8dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:f6:e6:81:54:50:bc:c9:67:35:c5:14:52:
                    3d:67:7c:54:97:26:19:ac:d8:f3:b5:98:b1:a8:77:
                    c6:85:86:94:6f:34:10:3e:61:7b:af:88:74:9e:f6:
                    ba:6f:81:ed:af:70:13:dd:0b:74:38:b1:1a:6d:18:
                    10:73:71:42:81:25:1e:e1:b2:52:c2:19:66:a1:7d:
                    34:5f:24:55:97:96:69:64:00:9f:05:8d:11:8a:ce:
                    fc:25:ba:1c:9d:52:05:3b:5c:ff:08:ae:a4:84:fc:
                    ae:9a:a3:e5:30:fa:1d:05:26:c0:d6:2e:25:6f:07:
                    fe:6d:aa:91:f4:9b:41:c2:83:7b:5c:93:a5:6e:23:
                    35:18:b2:12:a5:2d:64:c0:7a:90:5e:1b:9a:bf:d4:
                    07:1a:c4:dd:3c:32:5a:93:a7:46:9e:af:1f:34:04:
                    24:f9:91:fa:6d:59:b6:62:92:57:4b:82:cc:c8:04:
                    66:23:d4:e3:3a:9f:9b:ff:e2:1f:fa:aa:0c:17:a3:
                    7e:bf:a2:74:95:c5:f3:1d:23:6d:ea:4f:5b:8c:f0:
                    e5:cf:f4:60:16:ca:70:52:6e:d3:dc:4e:fc:6d:34:
                    c9:39:84:56:b9:ce:73:73:4c:45:2e:66:af:29:ef:
                    40:e7:2b:4e:3e:f9:fa:25:8f:f9:1e:a8:d6:57:d5:
                    83:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3A:3D:18:17:09:9D:02:D1:B7:96:22:7A:D4:B9:35:56:77:80:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/aed858b5-50fa-3f1c-8b7e-7068c9e11199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f0ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f4:bf:7e:4c:24:42:6b:77:b1:fc:b2:cd:17:d9:24:16:6d:
         c3:9b:b4:d5:07:cf:b2:f0:b9:50:ce:bc:73:96:20:77:f5:51:
         ae:a2:ef:30:28:3f:87:fb:37:37:62:19:33:88:2c:71:68:15:
         60:f7:4b:cf:6e:d2:57:40:ce:e2:86:ce:fb:c6:3a:db:ce:d1:
         40:2d:95:d1:79:1e:14:69:9d:a7:77:d3:2b:33:d2:b6:f0:ac:
         7a:4c:71:4b:20:6e:20:06:c7:31:af:bd:bb:6e:30:41:da:7d:
         55:b9:da:ba:46:c1:49:41:5d:98:ba:96:a1:8a:a6:96:27:aa:
         88:92:e3:b2:07:6c:bf:e1:6b:79:2e:6e:dc:a3:06:9d:eb:b4:
         8c:da:e0:8f:32:71:13:03:76:bb:91:1e:29:e3:ee:b8:c5:62:
         9a:04:9b:01:6d:e1:a9:b6:d2:36:54:cc:d9:02:15:75:4e:0c:
         a8:77:f1:48:6a:30:56:a3:b9:6e:0f:a1:7c:47:5f:6e:0a:86:
         d6:5e:f5:a1:41:dd:4f:ad:48:eb:b4:60:5d:c5:06:9e:3e:2d:
         a2:0d:9f:6c:42:4a:c3:83:30:e7:51:79:c1:d8:c6:bb:85:74:
         9b:7c:82:3c:c1:36:1b:68:61:68:2f:d6:68:8d:76:ad:17:79:
         39:68:e1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:00:13 2025 by rpki-client