Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
File:                     1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa (raw, json)
Hash identifier:          hQjWQ5e/VpoBC6WIaCoIzbAjSNiErEwNiEIfgJOgATM=
Subject key identifier:   64:E7:34:18:1F:36:E7:82:A9:81:F4:4A:04:D5:51:2C:B0:B8:C9:29
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F432858499829D1B9CEDD35C33FBFD9A0
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     401466
IP address blocks:        2602:f874:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d1:b9:ce:dd:35:c3:3f:bf:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=eef4f877-3911-417b-b808-c9d640f98604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cb:f7:d4:1c:c8:92:d9:16:ff:4d:b9:c7:77:
                    6b:e4:f3:5f:ff:ed:ac:fe:9d:8c:77:3a:d4:1f:04:
                    c0:b3:01:d4:6e:c3:38:c6:0f:8c:37:11:e4:e2:d1:
                    39:48:c1:7b:84:14:3f:87:ed:23:37:8c:49:ee:32:
                    30:1f:8b:22:f5:91:f2:b8:cf:fb:be:fa:df:c4:2b:
                    8c:e3:92:39:80:6a:7b:5d:f1:57:ee:8c:19:af:9a:
                    8c:d2:2d:6d:fd:ab:34:93:83:c5:f8:68:e4:c3:93:
                    99:80:72:93:74:9f:fb:d3:c3:d5:0a:c9:4c:d5:97:
                    53:08:d2:71:01:ca:43:12:db:82:a5:a6:52:9b:bf:
                    d6:70:8f:2e:e4:35:7c:f0:0f:0a:b0:f1:1e:f7:b4:
                    9c:10:32:8c:e3:51:15:0b:40:74:1e:f1:02:bc:06:
                    d9:d8:ef:30:0e:e1:8e:6b:9e:df:5e:5f:a5:a4:6e:
                    0e:d4:76:f1:1a:85:7b:3a:0c:88:da:18:e1:88:e3:
                    01:be:b2:23:27:6b:8d:06:dd:c0:bf:ea:7a:5e:ad:
                    3e:ff:4b:38:cc:69:63:6c:15:ca:63:4c:dd:bd:f5:
                    a6:d8:5d:6f:a4:cd:f6:58:03:e1:15:04:26:69:ef:
                    19:ad:20:99:3d:78:59:8a:61:b9:f0:89:75:d1:d3:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:34:18:1F:36:E7:82:A9:81:F4:4A:04:D5:51:2C:B0:B8:C9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f874:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:be:60:f2:50:f4:98:8c:83:48:7f:74:cf:00:7b:a8:0a:
         23:cd:a0:be:14:66:db:ae:a5:87:7f:47:95:25:63:1c:7a:7d:
         92:db:ef:5b:da:31:c9:09:04:51:93:7c:45:3e:50:32:15:3f:
         f5:1a:1f:4b:ad:72:83:46:3e:a1:bf:63:4c:71:27:97:3e:b1:
         a2:08:6f:52:3e:c0:7a:30:0d:db:65:75:9c:f1:14:aa:1a:7b:
         52:5b:fc:89:6a:b0:9e:b9:3a:48:2a:5a:8d:58:8b:cf:3a:58:
         8a:2d:9e:c5:5d:cc:98:21:af:8f:5e:66:05:75:8c:f9:e3:77:
         7c:a3:b6:b4:71:87:55:52:49:48:44:af:1f:4c:10:3d:e1:d0:
         5a:9f:99:39:cf:87:f1:a7:1c:eb:c6:7b:57:ff:26:7f:4d:90:
         cb:fa:a8:c8:71:8d:38:05:24:05:96:8c:e0:38:8d:fe:b5:65:
         bc:d4:b2:cd:36:bf:56:9e:b9:0e:af:01:29:07:00:63:e5:93:
         14:08:4a:ff:35:9f:c2:47:e7:1f:74:6a:56:af:b2:c9:21:fa:
         40:94:f9:03:08:1b:33:81:2e:f2:bb:49:20:64:fe:7b:d9:d0:
         1e:c7:ec:56:87:f5:a9:e0:a0:5e:03:f2:da:05:9e:57:42:32:
         91:09:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:58:19 2025 by rpki-client