Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa
File:                     49059429-394c-3c11-ac7b-2722179c21f1.roa (raw, json)
Hash identifier:          x0x1XP5blpvnV/PTpURw7xXUHd+Y5dkx/Xnt6FeA3G8=
Subject key identifier:   61:26:39:49:A9:EF:93:B2:33:BB:C1:52:25:CA:D0:DC:A9:A8:6A:36
Certificate issuer:       /CN=3c374cc3-37f8-48a7-88bc-e046c1661931
Certificate serial:       010D0C9F43285849C4D4CB7CEDA561AC1CB65D00
Authority key identifier: 10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     18796
IP address blocks:        2607:8e40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:cb:7c:ed:a5:61:ac:1c:b6:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c374cc3-37f8-48a7-88bc-e046c1661931
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=b0ae756f-4257-44c0-bbe6-eaac8e2a3855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:f1:1a:d6:a3:ff:f5:cc:f3:f1:24:58:41:
                    c8:ae:1d:77:4c:94:4a:88:b9:b8:9b:ad:09:dc:7a:
                    8d:72:ad:c8:dd:47:a5:a5:90:93:92:f7:4a:de:69:
                    28:6e:47:9d:38:e2:0f:ff:ae:2a:1a:6b:ea:d4:5c:
                    1c:9f:5f:e0:c8:db:e3:32:4a:89:17:85:30:00:d1:
                    ff:dd:7a:f4:c9:fc:88:15:54:24:b7:1d:39:fc:b8:
                    db:b5:f7:49:b3:70:38:31:c1:b0:b0:e0:4a:ca:9a:
                    48:cf:38:02:10:81:05:d3:84:b5:d4:dc:0e:ab:69:
                    79:0e:48:6f:8e:6d:b1:ba:15:d2:4e:a7:af:a0:3d:
                    22:cc:5b:7c:02:43:30:2e:08:89:2b:93:17:18:e0:
                    76:dd:6a:02:96:08:3f:d0:77:a9:d7:c5:68:5b:be:
                    33:95:56:0c:41:a7:20:2b:9c:2a:72:dd:e3:1b:9b:
                    02:fa:72:9a:d4:20:0b:d8:9f:85:f7:e3:7a:b0:aa:
                    5b:61:ec:36:2a:aa:82:3c:d5:3a:eb:77:e4:c2:13:
                    00:e6:e4:2b:97:07:be:9a:34:3b:74:4f:0d:e6:cb:
                    b7:01:f0:da:8d:77:27:62:d0:2d:a2:65:eb:a0:37:
                    73:3a:d6:64:e2:ce:7b:5c:60:d5:02:0e:72:f3:94:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:39:49:A9:EF:93:B2:33:BB:C1:52:25:CA:D0:DC:A9:A8:6A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/49059429-394c-3c11-ac7b-2722179c21f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931/3c374cc3-37f8-48a7-88bc-e046c1661931.crl

            X509v3 Authority Key Identifier:
                keyid:10:E9:2F:E6:FF:F1:FE:3D:03:31:B9:D1:7F:6A:0E:AF:B3:EC:83:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c374cc3-37f8-48a7-88bc-e046c1661931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:9a:5b:c5:9d:29:57:96:89:e1:cb:1c:dd:54:27:9d:67:
         41:21:13:34:a2:0e:5a:c8:d7:b2:07:24:e8:65:91:01:bd:29:
         03:1c:4c:ce:b1:45:de:71:ad:b3:6a:50:59:6c:d3:47:42:a3:
         41:43:c0:c9:f2:2b:4c:0d:e0:c2:35:f8:ac:c9:f8:d0:20:26:
         46:09:8a:24:42:3a:da:c5:6b:a9:ed:ca:4b:81:02:bb:e0:b6:
         90:44:c2:7b:52:62:63:50:f7:7e:0a:e1:0a:96:64:8a:79:f5:
         27:0c:94:f9:45:fc:a6:34:b7:6e:94:79:93:fb:9d:fa:3e:a0:
         e7:2d:e1:b4:fb:68:eb:5a:73:20:3c:9d:99:d5:cd:a1:e7:29:
         68:c2:87:2b:ba:aa:6d:76:3f:3a:76:53:7c:ca:1f:58:d6:91:
         ed:c5:45:a0:6a:8c:0a:7b:5e:1d:d2:4d:43:31:fe:90:e7:2a:
         37:bf:5b:a3:d0:42:65:0a:37:f8:e2:70:3f:a0:29:5f:9c:ed:
         b8:82:4c:0d:5f:50:bd:b3:b3:9e:fc:c8:e8:ff:eb:6b:8d:3f:
         6c:d2:c4:88:be:ca:d9:fb:14:b5:96:f6:93:6a:67:28:50:7a:
         87:3d:9b:90:3d:b1:35:4f:24:94:0a:04:97:a3:38:c5:f6:33:
         4f:55:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:11:40 2025 by rpki-client