Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
File:                     9f244d98-340c-3899-9c56-98ca1bbcc830.roa (raw, json)
Hash identifier:          KWzq1+bjU1hi4cHiKHalnJn/zeAETDiTkrgWDFamE20=
Subject key identifier:   C6:82:A8:51:13:35:88:67:D9:C4:C4:26:D4:CA:16:DE:25:D4:24:60
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F43285849A2B29D6C2BA4E3FE7E81B800
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
Signing time:             Thu 24 Apr 2025 19:34:40 +0000
ROA not before:           Thu 24 Apr 2025 19:34:40 +0000
ROA not after:            Wed 23 Jul 2025 19:34:40 +0000
asID:                     27539
IP address blocks:        2604:a900:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:b2:9d:6c:2b:a4:e3:fe:7e:81:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Apr 24 19:34:40 2025 GMT
            Not After : Jul 23 19:34:40 2025 GMT
        Subject: CN=1ecbeb89-5fc9-476c-986b-edcb16404222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:1b:1a:8f:f6:88:9e:29:79:c8:cb:44:8b:
                    59:7d:44:27:65:eb:0a:4d:b7:e0:09:5f:5f:9e:4c:
                    a8:92:e3:da:60:a5:d7:2a:1a:3d:2b:7c:c0:f2:d6:
                    83:67:23:35:c7:96:a6:27:8c:e6:57:64:35:e0:58:
                    b7:b1:61:14:15:15:4b:92:51:a5:38:57:a7:35:c3:
                    d0:c6:a7:8b:25:70:3a:db:97:e2:f9:f4:0b:ab:d3:
                    6d:21:ad:4c:68:13:9b:be:30:41:74:22:b7:db:e0:
                    c2:62:c0:2e:43:08:77:52:49:cc:4e:46:52:56:1b:
                    e0:7d:2f:36:9a:b4:5a:51:37:4a:18:da:c0:06:c9:
                    fa:73:7f:72:37:72:e3:3e:5b:3a:b2:6b:02:65:c3:
                    80:79:46:77:b3:86:16:94:62:be:1c:b2:04:09:15:
                    b2:c0:25:55:95:d5:24:bd:42:d5:dd:ca:d6:fa:63:
                    3c:46:90:f6:bd:9b:e8:dc:d9:88:e9:d8:e6:63:f9:
                    46:5f:e9:fd:9f:1f:6f:a1:35:16:15:04:f6:49:55:
                    8a:a4:3a:5a:06:d5:40:20:62:cb:d2:50:22:2a:6c:
                    34:ac:ac:22:81:77:6d:41:24:ea:92:e1:45:8b:e9:
                    39:a1:f4:51:7e:c1:23:b1:bd:02:ed:44:86:51:1e:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:82:A8:51:13:35:88:67:D9:C4:C4:26:D4:CA:16:DE:25:D4:24:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:65:33:57:fa:a6:98:69:ec:e7:d1:19:d3:dc:b3:2c:1a:88:
         b7:30:79:36:1b:e7:cb:4f:60:91:8b:1b:47:f3:a0:64:4c:29:
         dd:97:23:44:a4:1a:06:7f:5b:e0:19:72:4d:8a:1e:45:d7:e8:
         e8:13:a9:fe:bb:ef:79:84:4a:fb:57:dd:f2:62:71:68:9a:81:
         7f:de:53:19:45:2b:90:1d:50:0c:72:46:99:85:af:f0:23:ad:
         c7:a4:9c:35:8f:51:7e:50:d9:40:f3:ed:ee:a8:0d:84:6b:1c:
         58:03:cb:47:68:43:ff:a2:3c:45:2e:95:82:44:89:45:1e:6c:
         57:3c:ac:96:5f:fb:5c:bd:f5:c8:d6:0b:3d:ab:42:d2:d5:c3:
         76:58:8b:0d:e9:4e:4f:68:1e:5e:a2:3c:42:5b:ea:af:e1:ba:
         95:81:66:dc:9f:53:bf:11:e7:d4:39:17:6c:3a:4c:45:a6:15:
         82:7e:59:2f:0e:3a:82:2e:1e:62:bb:e1:62:10:1a:95:60:1a:
         17:c7:33:02:79:b8:4d:c3:50:eb:e1:05:33:b8:16:0f:a1:3c:
         11:95:53:fd:44:7e:6d:21:3e:81:13:e0:c7:4f:b5:24:35:91:
         b3:31:83:a4:43:69:57:d7:be:c8:9b:ba:dc:b8:63:fe:1c:c1:
         aa:35:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:31:36 2025 by rpki-client