Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
File:                     bac4515f-d3d1-3e27-8339-d055e249c5d6.roa (raw, json)
Hash identifier:          1tZfhI4m7ltMm91WWHHZh1nQMSh9JW2MeBuqp3+kqd8=
Subject key identifier:   77:71:76:2A:B1:7A:25:4E:E7:55:26:5A:85:98:EF:A0:F2:F8:9D:36
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA57CB46FDC621AC59B48
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8b6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a5:7c:b4:6f:dc:62:1a:c5:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=613c5b94-9187-44d6-bd46-8d822c1e7806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:86:32:c7:bf:08:55:80:9f:da:61:6b:6a:
                    a5:10:22:08:66:13:b3:dd:cb:62:cd:4b:2c:4d:68:
                    34:d9:5e:38:c4:a1:11:5b:b1:6b:df:7f:64:9d:14:
                    45:2b:14:15:f8:52:93:86:61:b2:60:ff:12:eb:bb:
                    89:e9:fa:1c:c0:f6:38:3b:35:df:fc:7a:b6:4a:c9:
                    94:71:cb:90:ef:b9:a8:ba:2a:44:ee:52:18:31:ec:
                    cb:d6:e7:3f:3b:43:46:4e:6c:a5:c6:68:ea:b0:d9:
                    a8:23:54:23:43:05:af:27:5b:fd:93:35:81:66:bb:
                    8a:ff:b0:1b:c3:ad:fd:b9:f9:9b:35:02:05:91:ac:
                    31:d7:e5:0c:a6:f6:60:e3:89:48:03:93:16:5c:d9:
                    03:fd:70:0a:d5:c2:6c:1a:a1:48:09:94:b9:60:c5:
                    00:54:15:b8:c5:e3:17:4e:a6:e7:6d:25:66:dd:40:
                    ec:6d:e4:57:96:5c:1a:2c:45:fc:65:bf:61:d4:85:
                    21:94:9b:9e:98:06:5e:21:d9:a5:de:26:6f:b6:44:
                    d7:f1:8c:8a:0b:45:39:d2:e6:be:2e:13:1b:5a:ef:
                    a9:9f:6f:f3:39:fc:c8:e5:1e:30:6f:e2:12:e8:b9:
                    9b:8e:a4:29:e4:4c:d6:2e:d4:3a:67:e3:04:8f:17:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:76:2A:B1:7A:25:4E:E7:55:26:5A:85:98:EF:A0:F2:F8:9D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bac4515f-d3d1-3e27-8339-d055e249c5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:63:b7:c0:f0:d2:6d:9a:4a:b5:26:31:36:5e:13:44:fe:
         e1:38:5e:28:23:c4:cc:fe:01:0d:0f:53:2c:c3:4e:dd:20:f5:
         f2:04:ae:66:1d:75:34:bc:b3:56:d2:e1:18:66:d1:92:a0:8b:
         c4:63:1a:d9:53:96:80:88:ad:89:b2:6a:4f:72:42:cd:e4:8d:
         59:f3:8b:34:c7:a2:0e:12:db:90:9d:bb:f2:b3:79:84:d8:33:
         2e:3e:85:bb:21:41:0b:b4:9b:ff:7d:ca:a4:12:92:2b:7c:36:
         85:84:d3:5e:ec:75:f5:47:41:cf:2c:3a:cc:6b:2f:21:91:7a:
         a3:5d:12:a9:98:c0:f6:2e:02:0a:19:5a:34:3d:78:7b:b1:ae:
         f9:6d:c6:ad:1d:45:6e:bf:26:df:b7:85:e1:d4:d2:90:27:6d:
         0d:80:c1:de:41:2c:15:44:31:03:13:02:65:3e:5c:0b:c3:2b:
         dd:c9:32:cc:1f:c8:6b:e5:46:22:a1:34:fe:e1:1f:b0:3e:40:
         5f:d5:ec:2c:16:90:ce:2c:d3:b8:11:73:f0:41:83:c8:be:5d:
         04:4e:35:af:bb:95:db:5a:dc:a5:66:75:57:3a:83:9b:c1:e6:
         cd:ad:15:8a:65:37:ac:68:d9:ed:47:17:3f:76:1d:b3:61:7f:
         f1:48:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:13:07 2025 by rpki-client