Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
File:                     e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa (raw, json)
Hash identifier:          fVoT2BZmnbR7CJE6wTAoDvnO/nUz3pKXQG7mfarTpSo=
Subject key identifier:   2E:32:A1:88:F6:4C:83:EA:D1:E6:CF:02:7C:44:D2:12:A1:13:F3:D8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F762E2B2EF02F197BE630
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:8218::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:76:2e:2b:2e:f0:2f:19:7b:e6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=19627248-f8c8-463e-8e7c-7282cad27cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:14:b3:12:ee:2d:d5:48:f2:15:2a:9d:d9:
                    a7:df:44:2b:55:1a:27:c0:7c:e9:99:02:5e:c3:b4:
                    1e:53:ef:f4:ca:d8:8d:99:31:af:b5:40:56:b6:ab:
                    7e:6c:8e:4d:9b:f6:3c:42:36:ef:6d:d2:b3:8b:f1:
                    c0:4c:57:56:c1:6a:a8:ed:53:7f:17:18:70:81:f9:
                    b9:3e:a4:30:28:71:b9:a1:41:24:97:af:82:f3:7a:
                    82:91:64:6d:a0:39:7e:b6:d9:ac:b9:c8:12:8a:e0:
                    ca:98:db:61:33:e7:98:99:7a:be:60:37:06:bf:e2:
                    46:b2:78:58:d0:34:68:4c:4f:70:28:1b:0d:fd:0b:
                    9e:3a:ba:46:93:e5:09:0e:b9:27:03:11:64:ea:8e:
                    fd:bf:f8:7a:7b:d3:a2:0f:20:81:3f:e0:a6:9c:af:
                    04:19:4e:5b:5a:d0:07:bf:1c:ca:69:c0:ee:fd:c4:
                    0c:e4:9c:ba:38:54:a3:20:49:3c:08:dd:fc:7e:0d:
                    80:6e:ee:3e:42:3b:2d:87:f8:e2:ca:5d:ab:2a:af:
                    bf:73:db:4c:7a:08:64:6b:a8:a8:3d:c5:a8:f7:fe:
                    e2:a8:e0:57:3d:1f:ef:a3:54:7f:36:6a:cc:31:e7:
                    53:84:c4:0b:c1:89:33:33:63:e5:f1:c6:2a:e9:43:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:32:A1:88:F6:4C:83:EA:D1:E6:CF:02:7C:44:D2:12:A1:13:F3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e2977c64-35a1-33e2-bad5-3b4a7af2a8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8218::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:97:a5:23:bb:a4:6e:59:ae:1d:ad:f6:f7:0a:4f:13:4f:9c:
         9c:00:a8:08:6d:ff:a1:50:20:d9:6b:1a:cd:a0:19:14:71:65:
         98:b6:ef:fc:50:91:4c:85:8e:5f:86:c6:64:b0:18:25:de:7f:
         a4:2d:16:52:e4:6e:86:89:f6:96:1f:4e:53:74:9a:61:7d:0f:
         2a:72:70:d8:71:4e:50:38:9b:d7:ee:bf:e7:b0:3d:6b:99:23:
         9c:69:c5:88:ef:fe:e2:8c:a1:6b:d7:0a:e8:6d:23:04:4c:f1:
         96:ba:1c:51:6b:d2:21:9e:0d:6e:fc:73:32:b7:32:c9:e4:9e:
         d3:d5:78:46:7a:28:7b:ed:f6:a2:3d:d7:63:e2:a6:03:65:0d:
         10:55:03:56:fc:6c:de:16:77:a4:8e:6b:95:d5:92:f6:f3:ba:
         b6:bf:0c:9f:a2:38:10:c8:76:fe:25:53:29:c9:35:f2:d5:df:
         b8:60:19:06:28:fb:c8:4d:24:e5:16:0c:21:c7:20:c1:6c:0a:
         e5:9d:36:9a:49:fa:59:8b:70:3c:3b:db:9c:23:7b:17:57:0e:
         4c:73:c7:d6:59:42:dd:16:65:d8:1a:88:80:d2:1b:59:ab:c2:
         a1:c6:a9:05:8d:51:c9:38:24:c4:b5:dc:97:bd:1f:df:f9:d3:
         60:d5:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:29:44 2025 by rpki-client