Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
File:                     eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa (raw, json)
Hash identifier:          xHKxmhxBd64cP9nD1D7m37hyhho+sNm3WSp7eywpuco=
Subject key identifier:   D3:E8:16:84:19:A7:11:D1:E1:94:28:2E:73:CC:5E:F3:24:6D:02:A1
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F43285849C79F631EE134453F2BEF4E00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     20773
IP address blocks:        2603:5:2100::/40 maxlen: 48
                          2603:5:2200::/40 maxlen: 48
                          2603:5:2f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:63:1e:e1:34:45:3f:2b:ef:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=4b68534b-6764-4493-9028-ec8503957934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:df:7c:0c:b3:d3:53:61:82:d5:fb:a0:df:f7:
                    87:4d:c6:52:ea:4a:a8:f6:43:09:29:40:f3:0c:3c:
                    3b:44:6e:3c:8c:d5:26:5a:c3:8d:8d:0d:18:c0:07:
                    e1:47:45:4b:df:b1:d6:57:aa:70:4b:2c:5f:83:10:
                    6d:a9:d1:4b:0f:26:c4:e5:a2:cb:91:07:45:71:96:
                    d4:b2:23:e0:54:ac:80:d7:d6:fe:e1:ce:7a:df:f4:
                    9c:e5:8b:e4:2b:e5:30:ed:98:f1:48:82:71:48:11:
                    6e:83:d4:ae:9d:59:78:33:fb:2d:78:5f:e0:f7:7a:
                    df:b3:e0:a2:c0:c1:b3:73:e6:d1:4b:1a:a8:9f:0e:
                    47:6e:f0:1b:8f:b8:af:56:c0:82:11:18:ce:cd:a6:
                    06:15:f4:3c:4e:59:54:86:1e:aa:e9:7c:21:d8:f0:
                    49:60:91:b3:eb:e9:c3:92:e1:0f:0f:a1:3d:2c:76:
                    c6:77:0e:99:fa:bf:43:6f:14:17:35:64:48:fa:48:
                    10:38:eb:24:29:a3:54:63:8c:59:57:47:b1:db:ee:
                    29:52:45:72:33:8f:c9:09:be:e9:db:26:01:82:a7:
                    14:f8:b8:c8:35:be:83:5c:06:a0:96:78:37:b7:ce:
                    d6:39:1f:4b:5e:34:00:6a:2c:dd:93:0c:de:42:b0:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:16:84:19:A7:11:D1:E1:94:28:2E:73:CC:5E:F3:24:6D:02:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5:2100::-2603:5:22ff:ffff:ffff:ffff:ffff:ffff
                  2603:5:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:17:80:69:1b:c1:aa:f2:b9:86:66:41:96:72:5b:ef:21:
         df:32:8e:f4:1a:d2:0e:f9:1c:b7:80:91:c8:40:9f:e7:74:38:
         f6:27:b7:de:d1:6e:49:38:37:5f:20:77:b7:15:7d:36:8f:a8:
         29:42:86:94:44:ca:0e:e5:3f:b4:86:2f:1f:cd:e5:36:48:95:
         f9:2b:fb:a5:8c:c9:4c:d2:7c:45:09:20:9f:41:3f:07:fc:d0:
         f6:d9:7b:71:e3:b3:7a:5f:05:68:f1:d7:fc:10:ed:32:92:cc:
         3a:b7:24:9c:2a:80:e0:76:7c:73:d3:91:1b:2c:a1:cc:36:a5:
         40:26:80:c3:1f:58:3f:1d:ef:b6:86:f4:98:74:21:c4:22:d0:
         c7:40:97:d0:46:e8:d0:03:d7:bb:78:e8:f0:00:9f:ea:dc:80:
         ab:24:a5:0e:9d:ba:7a:a5:7c:19:b3:b2:16:3c:98:40:53:63:
         eb:51:4b:7f:8a:df:b1:ea:99:3b:8b:86:08:d8:a9:0f:02:c6:
         49:23:0d:15:98:53:2c:32:f9:30:2c:7b:c2:ad:43:41:c2:6e:
         44:16:10:04:66:67:c0:cc:de:69:35:88:7b:b7:98:32:9c:09:
         e1:b3:98:63:3e:7e:dd:e5:ee:6c:3a:8f:69:53:05:cf:59:a5:
         25:c7:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:59:14 2025 by rpki-client