Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa
File:                     f48dd473-786d-324d-9c4c-b8969d5b5634.roa (raw, json)
Hash identifier:          x79m1iHA/kMgVJM1wljK0INsQfNj9nA5moGGmiDPA1A=
Subject key identifier:   D8:F5:1B:57:C2:39:3F:94:25:07:B5:77:DC:CD:74:5E:C8:27:16:02
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285849A4BB7978C9A46F51A3EEFF60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        2600:1900:8010:1000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:79:78:c9:a4:6f:51:a3:ee:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b1ab5bad-29b0-4ad8-b94e-7d0a33341eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:5f:86:5c:a5:73:1f:06:f2:c5:dc:d0:9f:
                    7e:bd:40:47:77:92:f5:3c:f3:e0:8e:01:0f:14:51:
                    d5:0c:98:00:b2:53:1b:ca:c9:6d:f9:33:95:4e:bd:
                    99:bb:ae:ac:66:b9:89:28:c7:77:f2:e0:58:c2:6a:
                    82:4d:5b:e3:41:49:28:a6:6c:d7:65:bf:a7:f1:79:
                    1a:cd:3a:5f:93:d6:f6:38:c0:ea:95:6e:7e:42:f8:
                    20:74:f4:19:8a:7c:5f:83:8d:ba:f8:da:fe:e0:1e:
                    2f:ff:09:87:b5:48:c3:3e:a7:c5:57:df:b2:54:85:
                    2f:ee:de:e9:45:d9:d5:57:95:61:bf:33:71:3e:56:
                    af:d2:66:d2:02:1c:30:89:1c:c0:45:09:99:3d:0e:
                    64:97:c4:93:df:7e:83:f1:8e:fc:8a:8b:c4:1a:f8:
                    f9:45:46:97:3d:b2:9b:00:ba:b6:e0:0c:c8:dc:50:
                    f9:89:6b:5e:ef:37:af:fb:72:45:da:28:38:d2:d1:
                    18:b7:a8:2d:64:fd:8c:c4:dc:f0:14:96:36:57:5d:
                    c7:89:fa:59:0d:4f:20:0a:99:8d:43:9f:26:32:bb:
                    09:97:ba:d1:8b:85:c2:28:33:2a:46:5d:ab:27:c1:
                    62:04:c3:f5:5f:31:cf:ff:07:ea:4b:8b:64:66:a1:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F5:1B:57:C2:39:3F:94:25:07:B5:77:DC:CD:74:5E:C8:27:16:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f48dd473-786d-324d-9c4c-b8969d5b5634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:8010:1000::/52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:03:b7:ac:4d:e9:12:78:13:2e:df:a0:15:03:6f:ed:54:a5:
         13:fd:d9:55:d0:b2:93:06:ef:b7:fb:08:2f:f8:73:aa:c8:f1:
         cd:26:83:ff:09:02:73:47:dd:af:84:06:a7:9b:65:fe:8d:96:
         93:39:14:ec:35:18:f8:38:ea:02:18:1d:c5:ed:9c:9e:0d:14:
         e5:6c:f3:f5:bb:09:19:fc:67:3a:88:cd:9c:29:89:3b:0b:bc:
         fe:f6:eb:44:60:73:cf:dc:af:38:41:d6:2d:b6:16:cb:45:26:
         93:24:b1:cc:8c:fd:e9:91:d3:b5:54:59:d9:db:78:8d:73:67:
         4f:b1:db:e0:4f:e0:46:c2:2a:2d:bb:54:9e:87:05:ad:80:46:
         50:f3:c0:f1:5e:80:28:18:4f:90:42:2f:13:89:27:8f:fb:a4:
         d4:ba:c9:be:14:cf:9d:d7:0f:44:ea:74:e6:82:6e:ae:4d:44:
         18:f3:7e:51:f3:56:6b:17:8e:d7:29:98:04:b1:7d:e9:d3:88:
         d4:25:90:e3:37:54:e8:e7:8b:5a:7b:b5:73:26:ca:b5:2a:64:
         46:ae:5a:f4:0a:ce:a0:3d:c9:dc:cf:e7:9f:d9:17:5c:33:bf:
         d2:b4:31:de:59:ad:78:79:25:7f:ae:ee:e5:db:e1:15:9e:17:
         68:99:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:01:01 2025 by rpki-client