Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
File:                     4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa (raw, json)
Hash identifier:          2leSfEkd6dr5LaoolKAeg8TA13FMZElGwQXyKvstSrA=
Subject key identifier:   65:EE:A9:D6:D9:C4:CB:88:FD:6A:FD:FB:6F:2C:1A:60:AA:EF:59:03
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7479CF3079DD3D734180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:80e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:74:79:cf:30:79:dd:3d:73:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8f4c7361-0d1c-46af-af6b-0499012c0f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:15:f4:c6:78:f5:86:7e:89:19:64:62:f0:63:
                    0f:2c:81:00:da:e0:e7:8b:2d:b4:4a:fe:74:e8:89:
                    15:93:1a:8a:5c:eb:d8:63:3d:3e:51:f5:27:3e:bc:
                    fc:47:46:6c:3c:0a:f2:93:26:17:3e:64:53:85:40:
                    2c:2f:df:4e:5e:d3:2d:02:bd:71:32:cd:d8:3c:16:
                    e6:f9:95:96:a2:cb:04:ad:67:3c:de:2f:67:ac:93:
                    5f:fe:74:ee:cf:23:2d:31:e5:a7:a2:77:89:be:2b:
                    cc:2a:8f:71:b4:a2:bd:7e:5e:db:5b:fc:da:65:c6:
                    8a:a6:6e:3b:73:2e:18:85:5e:e2:db:55:e1:3d:c4:
                    91:d1:7a:58:48:28:de:a7:93:2a:8e:b9:85:44:d8:
                    ac:30:52:c5:71:e0:93:e2:bc:15:38:97:af:94:a3:
                    fc:3d:4b:00:04:a0:1d:e1:c7:ce:90:c2:9a:4c:ef:
                    2e:d5:28:73:3f:63:25:92:6b:cb:9d:a9:50:ab:69:
                    fd:fc:03:65:80:1e:1b:18:83:c0:48:b9:95:63:7b:
                    6a:62:ba:56:7d:f3:33:4c:44:5a:e7:c0:c8:fc:a0:
                    5b:ba:6b:15:a5:9d:26:34:fb:88:a0:b2:47:9d:19:
                    57:c4:f1:d1:2a:62:a7:83:58:65:c4:5c:91:f0:ea:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:A9:D6:D9:C4:CB:88:FD:6A:FD:FB:6F:2C:1A:60:AA:EF:59:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:42:0b:31:8b:df:bf:0f:ec:22:25:14:4e:1f:1c:2b:ba:
         59:89:1f:8e:66:65:d8:05:73:8d:70:be:be:86:00:42:93:fa:
         f6:b7:75:26:5c:94:0d:3b:6d:09:3f:4e:91:95:c2:28:2e:15:
         64:d2:14:7b:f3:f1:83:16:24:7e:fe:ed:56:ed:b1:54:8b:e2:
         1d:af:27:f5:98:f1:c1:04:75:4c:c2:8d:4e:da:ee:34:7f:0a:
         10:f5:d7:2c:95:2b:9f:38:3c:99:8b:76:20:99:35:1f:b5:89:
         b9:a6:a4:c5:f4:ec:9e:db:37:47:db:a8:2c:5d:11:6e:8e:f0:
         01:bf:7e:d4:96:38:19:c6:38:9b:0b:bc:2c:0e:65:3d:af:72:
         42:fa:ee:93:a2:dc:a2:24:5d:69:8a:b9:49:31:9d:00:7d:d5:
         af:2b:2f:ec:66:51:c0:23:6c:d9:aa:19:46:cd:05:a9:9c:23:
         e8:6b:55:b4:00:a1:02:68:14:8c:b3:53:d9:ae:3d:51:3a:42:
         9e:c4:06:6d:dd:d8:99:41:25:11:28:89:87:cf:8b:35:f7:46:
         d3:6c:db:8a:60:f1:bb:1e:eb:77:a5:fc:28:a7:f4:da:ec:78:
         01:27:95:ba:f6:1b:7d:bc:6b:97:b3:a1:66:51:19:06:05:6e:
         e2:38:c4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:47:23 2025 by rpki-client