Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
File:                     92aee7d1-3371-3968-b369-67a5425209e6.roa (raw, json)
Hash identifier:          toYVbInm7Q+FgGnjZIb/0XnjjxErwSVLOWzrjlgawKY=
Subject key identifier:   FF:A4:43:02:78:8A:5F:44:1C:FE:97:74:64:92:27:A5:9A:8C:98:F0
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F43285849B57A0EC098FD05D3E3534660
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     1206
IP address blocks:        2001:5e8:ffff:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:0e:c0:98:fd:05:d3:e3:53:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=1ab6e987-a69d-447c-8ff5-000223f04bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:2c:16:7a:8c:ca:ab:69:79:50:49:50:44:
                    d4:0c:95:92:cd:d1:55:f9:20:4a:a1:f6:25:7a:bf:
                    56:4f:97:87:07:77:86:54:6d:83:b3:c8:9a:de:a1:
                    97:c5:f6:88:b3:e9:99:cf:3f:85:65:e6:b0:69:97:
                    32:8c:a8:78:19:74:72:ec:19:5c:bc:b0:db:9e:0e:
                    2b:0c:80:67:b4:ea:16:a8:4c:90:bf:a5:63:6a:0b:
                    c3:ee:16:1e:12:c3:59:05:fb:5d:ef:46:18:11:9f:
                    b5:04:6d:88:de:1f:4e:f1:00:36:f6:49:c4:40:cf:
                    c1:c9:60:0e:cd:ca:4f:42:c7:59:12:85:8f:93:b1:
                    01:b5:d5:d3:34:cf:d0:01:56:3f:b8:d7:de:7f:2d:
                    d0:03:2f:4e:43:73:99:78:8d:b4:3d:a0:25:96:71:
                    23:01:d5:41:ff:37:84:f1:a1:d9:0b:89:9d:96:3a:
                    87:f3:68:59:d2:6e:27:91:34:e3:34:cc:5c:f1:2d:
                    c2:ee:b8:ef:e2:ee:21:da:63:5a:ce:51:2a:cc:b1:
                    61:19:5b:90:bc:43:37:de:2b:0d:4a:50:89:4a:23:
                    63:90:22:70:08:88:da:47:94:62:47:50:10:2a:a7:
                    b5:cf:30:6c:b5:d2:68:bf:76:fd:86:c6:75:e0:78:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A4:43:02:78:8A:5F:44:1C:FE:97:74:64:92:27:A5:9A:8C:98:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:93:da:db:a4:e6:27:fa:96:30:8e:ef:23:0e:3b:d5:9e:
         54:cb:e0:44:63:fe:6f:ff:f1:32:42:45:13:8f:bf:ff:2a:ea:
         3b:c6:2e:b5:fd:1a:fc:ed:91:48:d7:a9:08:54:46:84:1f:81:
         1e:30:96:a2:ea:62:d6:81:f5:39:ee:e9:4d:bd:38:37:56:ea:
         91:bb:e1:fe:77:d0:3f:bf:a7:50:45:2b:b0:a0:e3:29:bd:17:
         b4:99:a0:73:29:92:08:3c:a7:2c:2a:9b:27:8a:c7:9f:a5:10:
         55:a6:c9:6c:b8:b7:6d:d5:2b:c8:22:72:e9:ac:64:22:45:2b:
         1d:a4:c1:c8:5f:4b:9f:88:21:5e:7a:73:a7:3f:d4:2b:e2:d4:
         6b:cc:8f:42:58:88:53:3d:45:92:e7:17:57:93:19:15:ab:73:
         30:0d:26:5d:d0:c8:15:a6:e9:53:7d:c8:05:5c:96:c2:b5:7d:
         40:05:1f:4b:04:ee:e0:ae:f8:0e:84:23:43:13:7f:36:33:66:
         ba:96:01:82:e3:cb:6f:e5:7b:3f:90:43:ba:37:41:7c:bd:cb:
         0e:83:9b:7f:f2:a5:bd:0e:17:d3:70:19:11:0a:3d:0a:85:bd:
         fd:09:c5:0f:e2:9f:9a:60:8e:53:6f:3b:b3:2c:84:eb:3e:8a:
         87:4c:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:03:02 2025 by rpki-client