Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File:                     00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier:          eOA1A6IUxxlikJUbWC6vl7xha7DO4Ol6BZFL+mguJkA=
Subject key identifier:   CE:9A:A2:26:BD:FA:9D:FE:99:31:BA:08:AC:D7:15:7A:3A:54:83:7B
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F432858498FC9C0DE8E626D3071A9E380
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     49
IP address blocks:        2610:20:6f97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:c0:de:8e:62:6d:30:71:a9:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=500ee169-67bd-47b3-af12-1756635ea7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:3a:aa:66:b6:27:43:ad:fc:ee:aa:b9:cd:
                    e2:49:64:0b:a0:1c:c2:f0:59:ee:13:35:1a:ee:36:
                    7e:48:54:cb:83:d4:f1:71:75:45:08:d3:40:81:96:
                    74:12:e7:ad:cd:b9:68:dd:fe:df:56:1c:1e:af:67:
                    00:bc:03:d8:ad:34:ef:31:1d:38:2c:b9:b2:6d:6c:
                    71:31:87:f5:1e:9f:29:f4:e5:d9:2e:1f:73:2b:8d:
                    f4:75:78:71:dd:93:17:0b:41:b7:d0:fe:86:ed:a0:
                    ae:90:2a:d0:32:96:46:87:5d:b8:83:3f:fa:b6:3b:
                    c3:40:24:5e:a4:df:d9:8a:05:32:84:d2:5c:2d:cc:
                    69:71:f3:ed:bf:b8:68:38:66:a1:09:2f:8b:7c:38:
                    f6:ca:c2:ab:e7:b2:31:1c:16:7f:1f:9a:c0:39:4c:
                    61:fe:38:55:c2:10:d6:58:12:ef:ec:7c:cd:cf:30:
                    01:a5:04:31:66:eb:64:ea:a0:ae:27:8c:3f:c1:40:
                    34:8c:8e:22:cf:0c:44:72:2f:b7:2f:29:29:c9:e3:
                    d0:ab:0e:0c:0a:0b:3a:33:f8:11:05:c7:52:44:37:
                    b5:8a:cc:8e:98:ca:f6:fb:4d:a2:f9:a8:fd:ef:5f:
                    00:2a:75:de:7c:7b:bc:d9:44:6b:4c:94:82:07:7b:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9A:A2:26:BD:FA:9D:FE:99:31:BA:08:AC:D7:15:7A:3A:54:83:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f97::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:c1:36:8a:4f:aa:b4:6f:70:04:dc:6b:9a:30:63:29:b9:
         65:56:92:54:93:ee:3a:41:e3:e2:f1:38:bc:cd:1d:af:eb:50:
         eb:67:e3:83:5e:df:36:df:dc:82:5f:14:5b:9c:e3:38:9b:32:
         4a:41:d5:1b:32:89:11:19:db:de:c8:61:3f:34:56:82:db:a0:
         9a:b6:a8:ca:40:f2:cc:0a:2c:5e:5f:3b:48:50:86:ec:36:ba:
         fc:74:6b:29:91:8e:9f:a3:d4:dd:c2:3d:10:7d:ef:1a:32:90:
         10:eb:ed:b4:62:9e:40:4d:48:16:00:0e:3e:e8:60:f8:69:54:
         be:8b:a3:0b:70:77:41:98:6a:c9:1b:78:94:6d:35:0b:d4:5f:
         1b:02:01:2a:e4:6d:d5:3b:09:14:24:96:3e:d9:7e:74:85:8d:
         5a:31:48:75:28:53:08:f0:bc:f6:da:cf:9b:75:6c:f5:d9:2b:
         61:bb:4d:7f:fa:9d:3d:a6:cd:01:ea:cd:21:52:9d:a7:48:be:
         17:67:bc:77:98:14:11:fb:4b:d4:b3:49:1c:ae:e1:94:08:ad:
         35:25:17:af:23:43:71:46:86:58:df:38:8a:d0:b4:13:d9:18:
         a0:e2:57:97:45:d5:97:51:f7:43:13:03:eb:68:ba:9f:15:d5:
         01:96:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:40 2025 by rpki-client