Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
File:                     04467d97-4061-38b5-9207-71b697628f7f.roa (raw, json)
Hash identifier:          XUmWi3eZMzs0dPR+SWoB82fYyegTS4T5HZI9ExbQgo8=
Subject key identifier:   9E:AD:D7:E8:DF:FD:1F:22:6A:09:00:5D:0F:BC:B2:20:40:8B:C0:5B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9BE3F0598B969AB78200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2607:f098:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9b:e3:f0:59:8b:96:9a:b7:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=6c6b0d94-d18e-48da-b4a6-0866c015b237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:37:ed:10:a5:15:89:3a:6d:88:92:93:2d:
                    53:83:7b:8f:c3:ee:ad:b0:eb:72:01:f2:3b:54:48:
                    19:aa:f1:26:7b:40:ee:c0:e2:c5:74:84:30:bc:68:
                    42:93:8a:7a:f2:6b:65:e9:88:ec:0b:f6:59:44:d0:
                    bc:f4:ea:b6:94:03:b2:39:28:6c:36:ff:d9:50:25:
                    65:c3:ba:26:3d:d0:96:39:4f:93:37:9a:5b:51:81:
                    69:da:be:96:e8:e6:d1:1e:4d:f9:1f:02:4d:a8:5f:
                    d1:9c:bf:aa:e3:af:fd:fc:a2:45:c2:7c:1a:1f:3c:
                    bb:e6:a2:81:e9:3f:bd:2f:42:8a:63:96:6a:66:7e:
                    d6:7f:25:7f:db:91:35:fe:98:b8:df:d1:f4:34:ba:
                    61:07:5d:49:05:f6:98:a8:b9:6c:b2:b9:e0:0d:be:
                    15:e4:5b:4b:58:71:a8:0c:59:93:f3:19:dd:be:f9:
                    f2:ce:95:88:fe:75:07:d4:3a:06:0a:2e:d5:99:13:
                    aa:d2:ce:0f:c1:1f:69:16:2d:d4:73:c7:93:38:89:
                    bf:3d:6a:ea:6a:a2:14:44:66:5c:3e:c9:29:5f:92:
                    1b:93:aa:c0:9d:bf:1d:57:7a:a7:24:16:e4:4d:fa:
                    d6:82:17:9c:14:58:62:8b:4e:62:86:a4:68:14:5e:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AD:D7:E8:DF:FD:1F:22:6A:09:00:5D:0F:BC:B2:20:40:8B:C0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:29:f3:0e:b9:b4:a8:70:88:91:1d:40:79:af:06:6c:bb:11:
         d4:e1:aa:5c:e5:f4:25:87:6b:24:60:9b:3f:f5:a9:ad:d7:0d:
         7e:3b:dc:80:45:5a:1b:c4:05:2a:a3:b1:8b:00:44:c0:62:01:
         21:3c:30:18:78:c1:e6:77:71:24:fa:19:ce:42:23:b9:1f:be:
         62:1e:1d:c8:5c:f4:31:6c:0c:7d:30:41:6d:2f:3b:a2:73:d1:
         94:65:e2:1f:28:fb:43:6b:7d:30:12:cf:ff:f0:8a:ed:1d:72:
         7b:83:3e:d2:70:6e:4f:78:04:0f:26:4b:17:2e:ea:17:b2:5b:
         9f:35:15:85:49:24:dc:d5:d7:34:52:52:24:7b:65:29:f1:f0:
         15:7a:b5:cf:b5:96:bc:e6:f9:5a:48:35:d0:44:55:73:ea:7d:
         24:b1:23:20:5b:90:59:d5:24:28:ea:2a:e6:8a:0b:db:62:d8:
         73:a6:d4:81:a6:b5:c1:24:33:02:20:e0:dd:28:e7:8b:52:24:
         c6:5b:bf:ca:4f:75:5d:9d:f4:99:a2:da:11:8e:27:28:4b:cc:
         5f:94:55:e1:5e:b5:3a:96:e8:61:62:87:87:73:54:6d:30:dc:
         dc:e3:9b:fc:ec:9c:c7:2b:ab:91:f1:ea:54:af:d3:d5:c7:0f:
         8b:27:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:47 2025 by rpki-client