Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa
File:                     ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa (raw, json)
Hash identifier:          jXdcHjhzlQouqvTxhaZqRxVm039+RG7YJYacmP3Patw=
Subject key identifier:   A4:DF:4D:E2:37:71:40:C9:58:D5:7A:0D:81:C2:AD:24:88:FD:A5:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA377061CF204BD92BA80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a3:77:06:1c:f2:04:bd:92:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=b48f675d-1a04-48fd-9e3c-111dc5e3b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:1a:a5:10:e9:03:b6:c2:b4:d8:71:9d:e8:
                    cc:c5:ff:9a:f4:a9:75:66:39:eb:ee:32:78:ca:3c:
                    af:92:37:41:95:b1:c9:4d:07:72:d9:68:e1:b8:47:
                    e5:1e:6d:a0:4b:0c:e1:04:15:62:89:31:01:14:7d:
                    08:d2:aa:e3:7d:dc:71:a6:d3:bc:cc:55:5c:32:16:
                    a3:c1:1e:22:eb:17:43:a5:cd:f6:65:29:eb:46:fb:
                    3f:a4:33:84:21:c6:23:9b:2e:f2:a6:ef:96:a0:37:
                    b0:17:d5:fb:6f:59:eb:0c:1f:78:18:ea:c9:77:ce:
                    19:ac:d5:d5:fe:5b:cd:9e:cf:85:61:e2:2e:71:43:
                    a4:72:c8:ce:fd:84:a6:d6:b9:6e:b6:d0:09:38:41:
                    69:49:60:a3:eb:8d:82:f3:7f:cb:95:0e:fe:cd:49:
                    de:f5:97:22:ec:40:fb:bf:57:6b:4c:6c:5c:7c:5d:
                    cd:d8:e1:be:d2:f1:81:82:a3:1b:f5:bc:6f:c4:29:
                    c9:58:46:f2:65:ee:52:5e:80:e7:a1:04:8f:96:d7:
                    4b:64:81:a4:a0:80:bd:c0:27:ce:51:30:57:ef:15:
                    c5:b5:42:eb:6d:94:63:11:7c:ed:29:aa:0b:61:96:
                    45:d6:39:9a:07:d7:5a:b7:cb:c1:f2:12:96:49:8a:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:4D:E2:37:71:40:C9:58:D5:7A:0D:81:C2:AD:24:88:FD:A5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ca1d57cf-72b5-3d8b-98c0-c0e291fc870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:2d:b5:92:14:1f:ff:34:90:97:6a:32:63:8b:9e:28:e5:
         58:38:ab:0f:2e:69:ae:a5:bf:5c:5e:f4:c7:13:87:14:82:3f:
         0c:68:7a:a8:bf:00:61:d0:61:48:b2:87:0f:3c:9c:e4:be:cc:
         0f:b8:d9:90:75:f7:79:67:3b:ed:f1:c7:e9:d2:12:dd:95:95:
         9e:f3:58:79:79:be:a8:28:5d:d9:98:6a:4c:18:c9:5a:94:84:
         6e:ac:1f:23:fa:e8:19:bf:07:a6:e5:41:7c:ee:2d:87:ce:47:
         8c:fc:60:e3:08:32:40:56:ca:45:58:2b:71:be:43:b6:cc:7d:
         98:65:69:55:55:76:4c:1d:4a:f9:8f:80:32:9a:f2:9d:23:e1:
         6a:03:05:99:bf:e1:fd:1a:e8:17:c2:31:74:fb:f9:7b:48:00:
         fa:0d:e4:2a:a9:d7:be:4a:c1:4c:9f:93:c4:fc:73:e0:f8:76:
         89:d4:59:25:19:01:12:15:4f:c1:19:6a:2d:7b:a9:72:9d:f6:
         c5:3c:17:e7:f4:cb:00:ff:30:24:19:e0:5f:b1:0d:ab:08:90:
         de:12:df:93:49:85:29:91:9a:ab:e9:11:21:9e:4d:23:50:a1:
         4e:1d:c6:49:00:b0:11:1d:40:0e:99:1b:91:54:ca:13:f9:b2:
         20:fa:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:13:02 2025 by rpki-client