Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/fc43ab0d-e506-3385-937f-88b3b52e3d91.roa
File:                     fc43ab0d-e506-3385-937f-88b3b52e3d91.roa (raw, json)
Hash identifier:          pxth5Y/lP96XvqZxBaLAZUx+KXOAm+daqgemcl07QrQ=
Subject key identifier:   99:55:BA:AF:77:75:D6:09:7A:04:5F:16:29:2B:C0:D3:1D:11:9D:97
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849B707ECF455EA4EA806C77400
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/fc43ab0d-e506-3385-937f-88b3b52e3d91.roa
Signing time:             Fri 02 May 2025 02:22:43 +0000
ROA not before:           Fri 02 May 2025 02:22:43 +0000
ROA not after:            Thu 31 Jul 2025 02:22:43 +0000
asID:                     399122
IP address blocks:        2602:fcd5:44::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b7:07:ec:f4:55:ea:4e:a8:06:c7:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: May  2 02:22:43 2025 GMT
            Not After : Jul 31 02:22:43 2025 GMT
        Subject: CN=597408ca-7d94-4e49-ae61-33b985f00b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:f0:90:40:75:28:b5:9d:ed:a3:5f:56:e3:
                    5c:7a:2c:3b:96:f4:89:45:f7:0c:b7:22:2d:ea:c2:
                    1b:21:97:cf:cc:8b:99:be:af:c9:79:dd:df:60:ed:
                    62:e6:6f:fc:de:75:45:12:c1:b1:21:48:43:3c:cd:
                    e8:b8:0c:1f:21:e6:f3:ec:b8:a2:74:ba:6d:c8:83:
                    08:b4:eb:2c:df:e8:dc:9e:94:f6:fc:de:0b:a9:ee:
                    70:6f:7b:05:43:54:12:48:3b:50:f0:6f:01:49:ec:
                    be:1f:f3:74:94:31:8b:24:24:9e:ec:a3:f6:a6:2f:
                    08:12:7c:5e:42:d4:6e:db:65:d8:bf:45:0b:42:67:
                    7f:95:60:21:7c:7d:c6:12:9c:a3:99:be:f3:ea:ff:
                    b9:fa:4a:4e:cf:a1:39:53:34:80:90:5a:e6:d2:40:
                    16:7a:07:59:7a:26:74:49:4d:cb:05:c4:73:5c:22:
                    de:90:e9:3b:25:40:58:61:43:84:de:a5:ba:d1:78:
                    a7:7f:a3:cc:79:00:60:e1:b5:f8:9c:19:24:bd:9c:
                    2f:f9:7a:b3:aa:96:fd:22:45:d3:98:54:e0:86:14:
                    4a:d3:a1:7d:8d:33:d4:5e:8e:b5:53:69:da:37:e2:
                    69:7a:21:9c:da:1e:0f:b7:a2:e7:66:14:23:87:fd:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:55:BA:AF:77:75:D6:09:7A:04:5F:16:29:2B:C0:D3:1D:11:9D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/fc43ab0d-e506-3385-937f-88b3b52e3d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:44::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:d0:fa:dc:2f:7c:ca:b4:15:87:1b:55:d9:50:cb:00:eb:
         c3:d2:f6:86:1d:86:31:19:27:38:38:7a:3f:7f:6f:97:ef:8e:
         21:4e:54:18:f2:68:24:a3:f4:48:0a:01:75:a0:e7:90:52:57:
         a8:ec:02:1e:4b:a6:c6:da:f0:3c:4c:34:71:70:db:3c:28:53:
         c9:09:46:12:7e:ab:ba:8b:26:91:a3:da:58:3a:9f:33:4d:43:
         13:5e:80:b7:62:5b:6f:20:fe:bc:f1:f2:f8:8e:81:f9:7e:61:
         cc:c4:68:50:21:df:39:cc:13:07:d7:83:1a:5c:1e:b5:f3:fa:
         02:d2:9b:e5:81:dc:c8:42:c0:f2:41:59:93:ee:8c:55:43:b3:
         26:ca:16:37:86:3a:ff:e8:27:9c:43:6f:ac:cd:11:68:75:8f:
         36:9f:ff:38:e3:a6:63:5c:ab:6e:47:51:df:69:56:fa:2b:84:
         bd:d9:60:e1:6e:d8:89:ff:9f:56:1a:16:94:fe:ef:5b:26:ad:
         91:b4:59:b6:33:54:43:d2:5a:4c:71:7d:2e:b7:fa:df:34:8c:
         9f:b2:d7:1e:e8:a8:50:a9:e4:99:0e:9e:ff:63:48:5a:37:b8:
         3e:5e:df:e1:24:99:89:d8:15:d1:37:a1:72:c0:c3:75:13:fc:
         3a:a1:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:02:53 2025 by rpki-client