Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa
File:                     49cc28f1-8920-3e70-8e62-82ee6613410c.roa (raw, json)
Hash identifier:          LJr7jQ30ozqYA6ga6+Pe7AuPFuqY+BvPcdivWhD/I4M=
Subject key identifier:   7B:1B:A9:7C:32:F6:D3:7B:93:E0:EA:8C:EE:DA:0E:E1:81:B2:01:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA3440D97444736D82D80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8069::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a3:44:0d:97:44:47:36:d8:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=245ee997-3ac2-48ef-8818-51b9d6d80529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:b2:97:f2:7f:e1:cc:ba:42:e8:f1:0d:a8:
                    11:9a:c3:db:6b:46:92:f4:f9:be:56:57:06:c2:31:
                    e5:b2:36:5b:3c:f2:a3:dc:41:fa:d7:ee:f6:65:a1:
                    4e:d2:42:06:d7:47:37:bf:0d:cb:b2:08:7d:b3:92:
                    e6:2f:25:ac:a3:22:c7:18:e1:5a:74:22:59:ee:a0:
                    80:d4:e8:46:5d:5e:f3:35:b6:3e:68:c8:9b:82:bd:
                    54:a1:8f:fe:9d:44:71:84:97:9d:db:c6:ba:f3:96:
                    32:9b:2c:9b:6c:6e:b4:61:f6:23:8f:d6:31:0c:82:
                    3c:06:08:4f:54:5b:95:f0:0a:9f:af:38:5f:71:2d:
                    86:c3:35:47:77:9d:82:06:e2:25:b1:6e:78:e2:e9:
                    84:52:48:3d:a3:4d:c4:50:cc:ec:d7:67:19:68:1e:
                    50:2c:3b:4d:6a:59:37:0b:f0:b9:04:a6:49:de:5e:
                    99:1b:59:2f:8f:96:2c:da:54:68:98:39:7e:18:55:
                    7c:a4:98:af:77:04:e4:e6:06:d6:fd:fa:e0:7b:01:
                    6a:52:21:57:ce:ac:d9:8a:d2:ca:50:a4:ba:c5:70:
                    c6:fc:78:28:dc:06:3b:83:d9:f9:46:a3:02:ff:80:
                    1f:74:16:cf:6f:b1:09:ff:7d:58:2c:da:c7:27:0a:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:A9:7C:32:F6:D3:7B:93:E0:EA:8C:EE:DA:0E:E1:81:B2:01:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49cc28f1-8920-3e70-8e62-82ee6613410c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8069::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:a6:91:dd:0d:ae:b1:bc:c3:79:4f:fe:35:9a:c1:2d:64:
         59:9b:60:01:75:e6:13:79:00:a4:03:bd:6f:0e:8a:6d:1e:15:
         51:2a:b4:04:b1:b0:1a:65:d6:e8:bf:eb:e3:be:34:d9:89:83:
         b4:b8:66:f0:f8:a5:4a:95:2b:55:19:80:a6:df:81:4e:1c:e2:
         ec:f6:d8:f5:61:50:19:f6:0f:10:01:3d:ba:0c:e7:22:fc:b8:
         f5:ea:30:25:45:38:86:92:69:de:39:06:4d:10:e6:05:57:9c:
         63:1a:28:74:b1:82:48:43:55:cf:69:4c:bd:c9:62:d1:63:3a:
         4c:58:a0:4f:97:ab:62:a6:2f:94:c0:55:d1:35:a3:39:57:e0:
         e2:e3:af:06:02:46:59:1c:b2:24:f0:88:be:33:7f:a2:a0:a3:
         24:7b:3a:66:9a:38:6f:5c:cc:9f:9e:6e:cf:c4:8f:2d:0c:92:
         d9:60:1f:2e:ed:76:26:47:ab:74:2c:95:a9:73:59:34:61:29:
         d5:a4:0c:23:51:94:3a:a2:bd:f0:20:7d:3c:6e:17:9b:d0:de:
         5d:11:b8:3c:8e:83:d3:66:57:f1:bf:e7:55:7c:e1:11:95:b4:
         b7:27:b4:8a:aa:13:b7:ab:13:76:7d:a5:7a:c9:1d:ef:6d:d0:
         85:c9:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:22:17 2025 by rpki-client