Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa
File:                     08523438-66a9-3720-a697-9fb7439aefc4.roa (raw, json)
Hash identifier:          mYk5dq9SHuY5IZuV8mrr66IfB+M4a0INLK2Rj0QDFwU=
Subject key identifier:   5F:72:1F:0E:3D:0E:B2:E3:90:9F:3C:06:BD:88:DD:33:B0:F2:8A:8E
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285849CE7DF80EFEBDEC2757B02100
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa
Signing time:             Sat 10 May 2025 12:04:09 +0000
ROA not before:           Sat 10 May 2025 12:04:09 +0000
ROA not after:            Fri 08 Aug 2025 12:04:09 +0000
asID:                     11017
IP address blocks:        2620:41::/48 maxlen: 48
                          2620:41:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:7d:f8:0e:fe:bd:ec:27:57:b0:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: May 10 12:04:09 2025 GMT
            Not After : Aug  8 12:04:09 2025 GMT
        Subject: CN=0d9dee35-c357-421c-9e5d-a3ef7c24f2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:88:6e:66:5c:b4:46:6f:6c:b9:28:2d:28:
                    08:b7:c6:6a:5e:6b:01:ce:1e:4a:52:d5:60:24:32:
                    9b:d7:24:2e:37:7d:57:a7:7a:f0:04:de:2d:81:54:
                    8e:66:36:0f:60:89:49:50:c3:4c:c3:80:34:55:c0:
                    fc:d5:cf:00:23:b5:f0:b1:f2:03:7a:79:4a:be:78:
                    c0:89:bc:9b:fc:ac:72:1d:c9:36:ec:61:18:44:03:
                    d7:58:87:46:87:6c:a3:95:eb:99:64:a6:39:84:6c:
                    60:14:41:a9:84:2c:12:2a:67:ff:b3:a9:3d:78:f7:
                    95:d7:83:07:3a:f6:e2:1a:d5:0d:29:19:67:07:0c:
                    5c:b2:95:d9:fa:11:65:19:f7:49:18:ce:66:c7:de:
                    bb:dd:1a:ec:cd:df:40:3a:61:a6:9d:0b:52:0b:f9:
                    75:6b:38:44:f5:c4:f8:ad:b2:e2:c3:9e:1a:90:df:
                    d2:80:92:a1:83:8b:26:7c:80:30:6f:d3:cd:79:b7:
                    3d:62:49:c4:eb:cf:e1:8b:af:b2:64:e3:79:43:c6:
                    88:90:58:e9:fa:4c:cf:87:fb:a9:68:da:3f:3f:20:
                    93:59:cb:ea:cb:5c:b6:67:f9:bb:8d:e8:01:6a:03:
                    e8:65:9b:e2:9e:5b:ab:71:4f:d9:27:13:b2:c4:c0:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:72:1F:0E:3D:0E:B2:E3:90:9F:3C:06:BD:88:DD:33:B0:F2:8A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:41::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:6b:47:4b:d2:70:ed:9b:dd:ae:54:c9:2c:99:a0:70:a2:
         97:89:38:31:c1:38:59:d0:d4:1a:f9:ba:60:51:12:ea:a2:dc:
         2f:93:d6:87:41:d7:79:7f:69:2d:a3:91:89:dd:c9:dd:0c:da:
         04:66:ae:54:64:e4:fc:41:76:4a:7b:1f:fc:ae:81:01:fc:d7:
         39:f3:1c:24:6b:09:2c:5b:ca:38:1d:33:ca:a7:9d:7a:14:4b:
         74:1d:e5:b3:33:80:54:dd:93:23:19:8f:d4:25:00:2c:53:7f:
         38:cc:45:6d:48:1e:82:fd:e9:76:5c:8a:84:e5:d0:21:cd:af:
         4d:36:8e:4e:9f:cf:69:cc:c6:74:3c:97:46:37:ba:5d:3b:97:
         d0:8d:9e:14:e5:21:dc:77:d9:4f:a1:5a:0e:c9:02:7e:1a:e4:
         f6:86:1f:c9:9d:52:eb:0a:d5:7c:ba:fd:6d:27:1e:06:da:2f:
         33:0e:43:34:33:65:0d:dd:9d:af:36:cb:42:a1:9e:80:29:51:
         06:c8:70:bb:c3:ba:9a:96:91:eb:cd:15:8d:be:d8:2d:da:f2:
         83:65:e3:41:75:03:c9:71:df:31:e7:f6:75:de:01:09:9e:40:
         52:04:f6:9b:d9:44:63:39:c0:42:d2:06:ba:9f:9f:30:a6:52:
         ac:91:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:39:20 2025 by rpki-client