Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
File:                     db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa (raw, json)
Hash identifier:          n4XOPscbJ3K7KCl7vKR0LNKGRAegE8caAFT8wCN5LN0=
Subject key identifier:   8B:7D:86:14:CA:35:DF:4A:37:9B:EC:99:61:7D:6C:DB:B9:EE:1E:9D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA17CB100D4255CE66980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:840e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a1:7c:b1:00:d4:25:5c:e6:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=13d1f1c1-c270-4a50-83cc-2c9f3076316f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:23:2d:cc:4e:af:25:8b:62:38:9a:9d:f4:
                    a2:32:68:55:3f:38:7a:01:85:55:e0:a4:89:64:da:
                    65:99:aa:92:f4:70:7d:6f:c8:17:d8:1d:bd:32:ff:
                    6d:0d:a0:d6:17:1a:9c:63:05:a6:1f:32:de:4c:e9:
                    ce:65:00:d9:5d:1e:43:0a:9c:6a:98:5a:ad:73:71:
                    5a:6d:2b:02:ce:e9:8e:db:29:e2:12:b0:2e:fe:5f:
                    2e:e8:97:8f:2a:a8:19:68:fc:07:97:f3:ea:e1:3f:
                    d3:9b:87:17:a1:86:5c:df:9f:9c:75:24:60:a2:be:
                    12:32:19:0d:47:a3:9c:bb:0f:4d:54:7f:96:82:79:
                    5b:68:08:c3:7b:91:2c:26:c1:b9:41:e0:a2:2c:50:
                    9a:b9:23:9c:7b:86:2f:07:28:8f:d3:33:41:3e:87:
                    70:ef:86:75:b9:ea:c6:47:c0:1f:90:18:86:3f:a3:
                    45:9b:50:34:93:4e:47:bf:29:71:ee:1b:f2:62:ce:
                    32:56:29:58:d5:57:4c:d0:15:62:91:ce:54:f5:ba:
                    e0:a7:9c:90:73:bb:b9:e7:41:8e:21:90:fc:e9:50:
                    fc:25:35:5f:30:6c:98:20:cc:6c:37:55:5a:1d:6f:
                    9c:97:d4:a6:b5:e6:0c:ca:1c:26:d4:06:ed:7d:03:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:86:14:CA:35:DF:4A:37:9B:EC:99:61:7D:6C:DB:B9:EE:1E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:840e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:04:0a:77:4a:0a:63:54:41:90:3f:52:92:ad:da:34:f7:35:
         7b:cb:b7:d4:94:49:4c:83:56:e4:21:5a:4e:e8:6c:af:8b:4c:
         e6:8a:2d:b2:1d:28:6f:c5:f3:4a:29:35:df:d9:9b:94:53:9b:
         0b:88:ef:ca:f3:09:78:08:16:0a:6b:2f:ae:75:07:c8:4a:82:
         4f:92:ed:33:7e:9d:99:05:ac:45:a4:f6:2d:63:91:8a:a6:88:
         23:b1:62:87:b2:d4:51:1d:da:8c:28:76:57:4b:7a:3d:b6:c4:
         8d:13:93:ba:e3:14:c6:ed:2d:09:9b:1b:15:06:d5:8b:a0:ad:
         63:12:de:4e:6c:99:7a:08:3a:49:29:df:42:5f:dd:8b:8f:c1:
         da:57:41:55:1c:91:5d:0b:7c:5c:ce:66:0b:e2:ab:38:34:3d:
         fc:7d:0f:89:7a:e4:2e:84:d4:7b:9d:c4:c7:84:5a:0a:4d:d6:
         ed:fc:f2:28:9d:9c:c4:d0:d2:26:58:4e:6d:50:19:14:3d:24:
         44:0c:cf:47:c3:44:c6:21:12:11:c8:b9:b5:ec:35:5c:c7:2a:
         86:dd:f7:19:a2:64:ab:20:37:5b:3f:98:72:77:fa:5e:70:5f:
         39:5f:ab:7a:6d:45:c9:29:97:23:98:81:78:ec:f8:62:93:07:
         05:5e:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:47:11 2025 by rpki-client