Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b55113fc-9254-389a-a236-96a789b8ece4.roa
File:                     b55113fc-9254-389a-a236-96a789b8ece4.roa (raw, json)
Hash identifier:          pZN82F9wjCrC2cD6FlfOivuWL6YoiMoklCtT7OWGPnM=
Subject key identifier:   D4:55:56:B6:16:11:C9:A0:13:89:32:F5:34:A8:C6:26:5B:B7:F1:48
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858499829C0617961FCF0726C7480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b55113fc-9254-389a-a236-96a789b8ece4.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     13335
IP address blocks:        2606:4700:4027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:c0:61:79:61:fc:f0:72:6c:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=35ef50d9-d2c4-422b-9902-2cc63d27c52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:7c:d8:64:4e:52:95:ca:bf:9e:44:70:be:
                    e8:4a:34:57:6f:9d:7a:00:28:e9:9f:30:ad:d9:fd:
                    54:48:3f:a8:e5:6a:49:5a:51:83:ae:9f:26:7f:c6:
                    82:6e:2a:6f:55:d5:5c:36:ac:e5:9f:60:51:54:f2:
                    21:10:7b:57:c3:2e:d1:ca:45:42:03:4f:2f:4b:29:
                    23:2f:96:05:52:9a:ae:45:58:c2:b1:c5:ff:23:cc:
                    a5:7d:28:a6:7b:74:0d:e9:2f:39:8c:5e:d1:38:b6:
                    e2:54:1c:4e:da:82:98:16:c4:e1:67:8c:10:f5:fa:
                    19:7d:7b:a5:9c:57:04:ee:9a:2a:5e:38:d2:de:50:
                    70:d8:44:03:6e:7c:30:57:5b:72:12:4f:d0:c6:3b:
                    c6:50:ab:d4:1c:91:9d:8f:b3:e2:63:75:02:08:7d:
                    6d:85:98:fc:92:49:ed:98:11:90:e2:94:1e:91:c4:
                    f4:93:4e:0e:0e:00:bb:3a:c9:94:60:f4:4e:3b:c1:
                    bd:45:c1:90:46:17:e5:1d:3d:38:20:9b:84:06:10:
                    87:f5:58:5a:73:7c:e6:fd:cd:84:5b:7d:94:dc:a3:
                    d4:0b:5e:55:17:04:71:f4:4c:cb:07:a8:b5:e2:04:
                    35:8e:54:0d:13:bb:ee:83:59:74:a1:04:7c:f7:d9:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:55:56:B6:16:11:C9:A0:13:89:32:F5:34:A8:C6:26:5B:B7:F1:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b55113fc-9254-389a-a236-96a789b8ece4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:e5:0f:68:c2:8a:59:74:aa:87:48:b0:c6:44:e3:04:33:
         ab:e3:65:59:26:90:20:b5:b5:34:ad:e2:5b:e0:8e:cb:ac:8f:
         63:57:95:4d:1c:13:90:4f:0e:e0:47:4e:bc:bf:41:73:b1:7e:
         10:0c:93:e0:87:d9:d4:0d:3c:48:79:d4:47:6a:7d:93:eb:42:
         45:4b:b6:f4:a2:96:07:d4:24:ec:95:7b:e7:3f:08:42:1c:28:
         49:90:3b:d1:ed:9c:2b:07:84:87:ec:51:3f:1b:29:ad:44:1f:
         a3:20:74:d7:01:97:91:d0:f1:68:f2:65:79:63:4a:57:8c:f9:
         1a:d0:3f:96:ec:b1:a3:fb:9c:72:6a:5c:fe:6b:fb:15:92:95:
         38:59:39:29:dc:a2:c5:84:3c:2c:5b:ba:b6:45:b9:6b:ec:03:
         2b:d4:3d:18:6d:5f:60:1d:3e:5f:35:89:fc:03:f6:09:3e:7c:
         dc:97:9f:95:32:f1:f6:e5:10:da:f9:8f:c5:36:80:ae:fd:c8:
         9f:d3:2b:88:85:1c:a4:ab:5a:f5:b6:66:07:65:74:e9:83:e6:
         89:f3:f8:64:e6:61:dc:cc:88:f5:8e:48:1f:e5:91:f5:e6:21:
         1b:e4:6a:af:4b:07:86:c0:c2:fa:df:e1:91:94:15:7d:b8:68:
         f8:fc:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:15 2025 by rpki-client