Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4db8696c-cd18-39a3-bd77-50683c38ca11.roa
File:                     4db8696c-cd18-39a3-bd77-50683c38ca11.roa (raw, json)
Hash identifier:          AKmCKv4fweo0pegkb4W/21c9SXxhM0B37yPwxqiF+Mw=
Subject key identifier:   F6:36:A4:7F:66:8D:2B:C8:14:E7:00:BF:2C:FB:65:DD:3B:8C:06:3C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7AFF78BD5682F93E1C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4db8696c-cd18-39a3-bd77-50683c38ca11.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:812c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7a:ff:78:bd:56:82:f9:3e:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=8ff65fb9-064b-45e9-b6cc-d26b6cb70ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:96:0c:03:09:22:3d:84:89:eb:08:01:ba:
                    5c:35:79:7d:73:e1:ad:84:86:36:3c:af:a3:77:75:
                    82:6a:e7:05:ae:1e:85:f2:58:0c:a4:e2:53:ea:6d:
                    2e:9d:c9:b1:9f:e0:33:9d:26:b1:91:f5:77:61:b9:
                    b8:5f:12:2f:5a:b7:e7:dc:c2:68:46:36:74:61:37:
                    03:d7:25:ed:eb:3d:dd:89:2b:2c:b1:be:58:f7:03:
                    9e:15:6d:1f:f3:bf:35:25:00:c9:88:48:44:0e:08:
                    5c:70:44:87:cf:ea:d8:1c:a5:af:a2:75:dc:bf:ff:
                    42:d8:96:a4:15:8f:f0:e3:fd:bb:ba:4b:eb:eb:cd:
                    09:9d:9c:37:47:5c:5e:a4:a2:5a:2b:30:50:99:b2:
                    f2:7b:e7:0f:e3:23:a2:56:8f:bb:35:f7:c6:ca:e1:
                    10:d3:d3:ab:64:a3:9a:b9:e0:d7:af:a6:f7:49:58:
                    d7:fb:75:24:fc:e7:72:84:79:e7:7b:01:21:e8:72:
                    53:ce:69:81:f7:8d:10:61:94:b1:79:20:09:58:3d:
                    7a:aa:a7:c4:7e:59:f7:c8:00:5f:0d:0b:a2:6e:d1:
                    e9:41:7d:95:f1:ed:17:15:db:ca:42:02:c4:27:47:
                    0b:b4:31:d7:dd:9c:0f:48:5c:0d:43:46:66:b8:40:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:A4:7F:66:8D:2B:C8:14:E7:00:BF:2C:FB:65:DD:3B:8C:06:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4db8696c-cd18-39a3-bd77-50683c38ca11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:812c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:e3:08:a7:a2:c5:32:4a:b3:85:9a:c9:04:49:9a:2f:25:
         40:0b:c8:92:e7:23:e9:80:11:80:b8:42:a4:83:d5:8e:78:61:
         14:bf:93:fa:7c:6c:93:6f:88:f7:83:c6:9d:ff:03:3e:e5:07:
         75:41:fa:93:d9:45:88:6a:f5:e9:c7:94:dd:86:0b:53:89:a9:
         9e:e2:0a:fd:ce:9d:b1:e0:55:94:a6:fd:d7:f1:ed:12:5e:24:
         7a:42:01:3a:dd:fe:83:ff:21:b0:91:b3:2a:6f:26:6f:0e:4b:
         d8:59:df:94:35:dc:84:7c:0a:ca:ef:e1:1f:f0:23:63:60:2e:
         b2:79:55:9e:8d:67:15:d1:2c:ab:60:7b:a2:ad:21:77:e7:d1:
         a8:25:d6:7d:ac:21:bd:03:23:95:ab:e4:a0:32:9e:d8:3c:9e:
         f8:a9:7a:57:b6:9a:31:1c:84:6d:98:00:51:03:2c:48:8f:77:
         b7:95:a3:7e:48:a9:87:04:8b:bd:71:d9:a0:82:fc:e8:00:67:
         42:1f:6f:95:2b:0d:b1:b6:1e:c9:12:e5:58:40:ec:c6:da:f6:
         5a:3b:c9:16:de:06:41:aa:cd:17:16:26:45:f7:f4:0f:3e:50:
         48:1b:ef:3e:b2:5b:c8:03:b0:9f:4c:a9:22:25:d6:5c:d6:3c:
         75:5a:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:13:49 2025 by rpki-client