Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
File:                     0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa (raw, json)
Hash identifier:          Z+MgeT9iyWaZoNdmXfwecV00f6sDp8yLbcAbNWMiQQE=
Subject key identifier:   76:74:EF:64:C9:BC:99:EE:44:37:0F:FE:03:64:94:67:99:E5:8F:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9911DE2DF6431BA88480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:9000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:99:11:de:2d:f6:43:1b:a8:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1ea0bc28-d220-4907-9f22-4c9506c9de4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:6f:39:d8:82:cb:55:ae:d2:bb:b6:52:20:
                    f4:e3:0c:07:3b:38:6b:51:93:a8:ee:02:41:8f:72:
                    d6:eb:dd:91:2a:b0:a1:35:ca:43:98:75:a5:5a:3c:
                    86:70:47:58:9e:47:bc:65:03:ce:d3:33:bd:07:43:
                    dc:80:2f:2d:dd:12:b6:e6:88:6a:39:83:9a:41:b5:
                    07:1c:e4:e5:52:92:df:ee:cf:62:c0:69:aa:21:b4:
                    41:93:8d:f8:9e:6d:db:b0:50:bc:fa:c4:2d:a1:93:
                    26:cb:67:15:e8:3e:1f:92:61:d2:c6:7c:a8:64:8c:
                    34:ce:08:56:11:1c:12:76:40:7b:28:d0:17:60:93:
                    d9:d7:52:21:ed:56:d8:91:a3:62:fd:a3:18:04:79:
                    53:c5:89:71:13:b2:7f:5f:d8:1c:17:fa:6c:1c:40:
                    b4:28:ea:0e:a7:7d:4e:80:a7:d8:bf:bb:29:94:97:
                    1b:ef:61:22:d5:79:c0:3c:71:31:a1:85:7d:e6:32:
                    18:57:8d:57:31:a0:8e:5e:94:33:94:d3:a2:86:25:
                    e0:82:ed:01:64:2c:e3:12:33:0e:a2:26:11:61:74:
                    6c:b1:23:20:ed:b2:af:f4:48:72:d5:51:2d:ce:b9:
                    3a:45:1d:18:a9:24:c3:aa:40:b8:74:01:82:48:71:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:EF:64:C9:BC:99:EE:44:37:0F:FE:03:64:94:67:99:E5:8F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:16:2b:f9:14:8d:ef:c3:9f:d8:22:4a:cb:49:39:0b:51:b1:
         50:e6:19:fb:5d:d2:bb:e6:07:2e:81:7e:a5:bb:5e:28:1f:20:
         b3:7b:8d:4c:2f:7c:6f:19:06:5b:cf:8c:41:16:fc:fd:00:91:
         38:db:86:4b:0b:b5:2a:91:e0:17:dd:6d:b5:7b:96:f0:d9:d6:
         92:2c:33:7f:fe:d9:2e:d5:b0:9b:0e:fe:9b:ae:90:9a:a6:de:
         03:1b:43:cc:dd:26:a1:bd:a6:22:45:d2:1c:02:69:64:9e:06:
         67:89:fa:8d:7e:31:40:de:c7:1b:76:7d:9c:0f:3d:d1:8c:bf:
         0a:ee:92:c9:ab:c1:80:a5:a7:40:e6:e8:0e:7e:96:3f:17:a7:
         88:c2:eb:22:5d:df:bb:7d:9a:fe:b9:3f:5c:0f:4e:1f:23:b8:
         d1:9d:dd:d3:df:74:43:9a:f8:8c:ef:7b:70:65:99:1e:55:6f:
         b7:da:be:0c:e1:4e:24:8a:6b:35:97:e9:e4:70:d3:f0:f8:b8:
         ae:66:a8:a1:a7:d3:1b:29:1d:0f:45:e4:94:1f:cb:d2:6e:7e:
         c5:a1:c1:a8:cd:9c:1a:f3:3c:4a:8c:63:6c:0d:95:f4:8c:73:
         8f:19:55:62:b6:b0:eb:47:20:f2:38:02:6f:71:ed:48:fd:eb:
         84:a2:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:37:07 2025 by rpki-client