Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa
File:                     fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa (raw, json)
Hash identifier:          JFJ5LOmbokJgSNCS1kPGIb4r6fqTGrj8WMKT6h9uerk=
Subject key identifier:   4C:39:70:01:33:AD:56:EF:69:23:ED:1F:44:25:73:CC:70:B4:1B:50
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849B14A1E5F1617049640929C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     7029
IP address blocks:        2604:cb00:2700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:1e:5f:16:17:04:96:40:92:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=4312538f-50ee-4576-a5c2-e975e8d08bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:af:fb:e0:49:18:4b:c7:e7:19:4a:ab:c3:
                    44:4c:44:64:1b:bf:89:fd:bd:2d:f8:4d:06:26:7e:
                    fa:d8:8b:18:47:f8:78:d8:09:c5:77:cc:5a:6f:47:
                    77:84:0c:58:48:0a:33:0f:be:57:72:8c:e3:73:fd:
                    31:c8:02:ec:01:84:69:35:5e:6d:60:80:7a:46:86:
                    40:af:fa:f7:20:ef:25:89:bd:ff:64:b7:03:69:7f:
                    de:fb:fe:ca:51:93:62:b6:1d:ee:c2:1f:f5:4c:2d:
                    87:53:c7:3c:d7:15:7b:09:d9:3f:92:e9:d7:12:01:
                    8e:2e:6b:a4:c2:ff:ba:b8:53:a5:bf:e6:f9:a8:41:
                    67:0c:c4:2f:2b:61:0e:4f:73:11:9d:2a:b3:52:90:
                    9c:03:22:83:76:a5:ec:f1:8e:4c:63:36:1c:a7:a4:
                    36:ee:1a:44:da:f7:3f:16:73:a8:6e:64:f9:7d:40:
                    4b:25:64:4f:71:9c:d6:54:b2:c3:c0:28:61:c5:72:
                    bc:e1:de:8d:c9:28:22:f3:bf:16:dc:d8:83:d1:73:
                    ef:9c:36:14:31:08:73:0f:79:c2:3a:ca:b6:de:a6:
                    30:ea:9f:c6:45:f8:ad:2f:5b:23:f3:eb:2b:59:35:
                    3b:ff:2b:a0:70:db:d6:2f:6f:67:fc:fb:e2:c5:67:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:39:70:01:33:AD:56:EF:69:23:ED:1F:44:25:73:CC:70:B4:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe972e48-74a0-35b9-b0e3-b136033d4eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:2700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5d:b1:b2:8c:03:0a:0d:30:a2:1a:43:6e:34:0e:4a:7c:75:
         29:5e:ed:83:0f:d9:e3:49:b6:95:67:c1:3e:96:94:53:30:6b:
         b0:6f:e8:bb:15:c9:27:c6:86:a4:73:c9:c9:38:2c:c1:79:fa:
         8e:87:50:4c:de:b8:23:9c:36:cc:be:b1:22:51:9d:87:86:8e:
         a0:4f:ae:2f:b6:4b:f5:98:e0:dc:21:a2:4b:cb:a4:37:1b:1e:
         7c:97:ae:50:0d:67:8d:44:fb:48:b4:5d:9f:72:22:e6:98:a2:
         cc:bb:16:c3:db:a7:f8:06:f0:b6:e1:25:fb:c7:63:53:25:71:
         5f:4b:68:a5:72:bf:7b:43:2c:3c:e7:36:e4:b7:e8:24:3d:16:
         ec:d7:3f:3d:d3:18:af:11:a4:f8:9f:a1:45:0c:62:62:b7:3f:
         58:b3:d2:e4:43:6b:1a:e8:d1:c6:79:a5:c1:29:56:00:09:cb:
         f6:3c:19:0e:36:61:d0:94:97:2e:90:aa:8c:1d:6d:80:82:c8:
         ce:ae:b5:06:2e:7d:c2:ab:25:77:8d:91:dd:cf:6f:49:b9:fe:
         e6:7e:2d:3d:c1:62:25:27:8e:ad:9f:8b:33:52:d8:5b:4e:93:
         2d:f9:d3:2b:05:a4:4a:f4:ea:81:98:89:58:2f:55:a3:70:f9:
         27:51:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:17:30 2025 by rpki-client