Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa
File:                     00647fa6-504d-3502-a211-b7ddcaeff076.roa (raw, json)
Hash identifier:          pnuexNA7E2Scg3mi7FboVWgBRbUWQ4Bf0+4KVUbnZvU=
Subject key identifier:   B6:C7:48:72:BF:52:2B:69:9F:F9:C9:8F:40:3B:0A:BD:5A:2B:D3:37
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9BD8059B3F7C20B59900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:9031:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9b:d8:05:9b:3f:7c:20:b5:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=906a1985-9ff6-4f6b-80db-494ac8486f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:bc:5e:ef:4f:dd:ae:bd:dd:bb:b9:6e:a2:
                    d9:51:86:0c:50:5e:8b:61:8c:4a:ba:df:40:e3:3f:
                    5d:bc:46:34:4d:1b:6f:76:f6:22:df:b4:47:98:34:
                    81:c9:c5:4c:70:2e:4a:ca:7c:a1:6a:51:54:2c:42:
                    f6:ad:35:62:c1:80:33:4a:b1:ad:de:a9:0b:01:d4:
                    6e:aa:8d:fd:bf:62:bf:cb:b8:12:72:45:ec:b6:94:
                    8e:58:36:38:6d:a0:5f:59:0a:2d:92:f7:43:85:87:
                    5f:c1:41:12:14:11:4f:16:62:06:52:71:e9:cf:f2:
                    57:0d:b7:d5:a9:f6:5f:dc:57:0f:06:d5:9a:97:4f:
                    2f:2a:2b:ee:ef:53:88:b0:b5:d6:10:c2:69:69:34:
                    38:bb:03:00:70:ce:3c:b1:f1:9b:c5:eb:32:18:0d:
                    64:96:5c:bd:40:85:3e:59:32:bc:87:4e:ce:cd:9f:
                    10:46:bf:dc:e5:98:46:f7:38:b3:2c:7f:9c:34:5a:
                    f8:ab:64:97:ea:d1:c6:94:be:91:46:d9:b2:81:8d:
                    10:14:00:2e:9f:84:84:0a:05:85:bb:fa:a5:94:93:
                    72:70:53:2b:8e:0a:d6:34:cc:02:9c:4a:eb:66:88:
                    2c:b2:00:c4:32:1e:6d:60:df:20:0a:87:b7:94:04:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C7:48:72:BF:52:2B:69:9F:F9:C9:8F:40:3B:0A:BD:5A:2B:D3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:91:ad:df:fa:ce:e5:ea:9d:59:17:e6:8b:23:bc:fc:f1:
         0d:7c:af:09:fd:5e:d2:95:db:3b:83:16:dd:39:89:80:18:a2:
         17:23:3c:7e:93:1c:10:8b:a8:70:15:b3:08:74:f2:65:04:fd:
         21:bd:d0:56:29:e2:49:1e:f7:b2:53:d8:76:2c:44:ac:c6:04:
         74:f0:5c:58:76:46:5f:b4:a7:ce:93:83:6d:d4:e2:04:6e:cd:
         97:3e:a2:4f:a1:42:38:ae:4b:09:ff:63:cd:09:d8:f4:e6:89:
         4b:2b:36:c0:56:62:52:e5:e4:6b:8f:81:19:78:66:d6:a2:40:
         3a:f8:77:a7:32:7b:0b:b7:1c:44:da:45:22:62:59:10:a6:0e:
         28:46:b5:2b:58:7f:0b:14:5d:43:c5:f4:f4:76:f8:7e:1b:24:
         07:21:64:37:32:bc:5c:df:87:c0:7e:82:e2:80:a3:8f:3d:65:
         70:08:f0:e2:15:0a:b3:3a:86:17:74:3d:16:b4:da:cc:27:49:
         29:d1:d3:fe:b9:d1:2d:6c:4c:bf:49:97:fd:cc:a2:9b:a4:a0:
         53:04:fd:13:14:2b:60:39:96:5a:71:71:82:bf:d8:b0:28:46:
         49:e3:e5:b3:ff:33:46:8e:b2:75:c6:b5:44:24:f5:c2:90:25:
         a5:59:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:55:41 2025 by rpki-client