Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ef926c5e-ffe1-3af9-b52d-5468e55e91e2.roa
File:                     ef926c5e-ffe1-3af9-b52d-5468e55e91e2.roa (raw, json)
Hash identifier:          DPNdbVUqB9RufBRsJ6UXDDWl66Yp/Z9PmaC4kj3S+bg=
Subject key identifier:   17:AD:68:2C:B0:2B:7D:BB:5B:46:1A:F0:D2:44:0E:25:D1:15:76:97
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F432858496FAF066FBCE0AB0A530FBD00
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ef926c5e-ffe1-3af9-b52d-5468e55e91e2.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     1024
IP address blocks:        2602:fca7:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:06:6f:bc:e0:ab:0a:53:0f:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=eb1405e2-ac7a-46e1-9cd2-811c1b06259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:d5:fc:88:9a:b4:19:4c:77:9b:fd:84:76:
                    57:2c:4a:2d:e8:65:8d:3f:60:ce:17:62:75:0f:8f:
                    8c:36:ea:38:67:c3:f8:ec:3d:66:6a:5d:f4:82:e3:
                    00:39:95:33:4e:c2:87:b1:a1:85:d6:1d:0b:d5:0c:
                    ff:da:6a:af:8c:20:05:55:15:fe:ab:a4:9e:cd:65:
                    c0:1e:fa:c3:0f:5c:3b:ce:73:8b:0d:c1:a3:85:68:
                    14:d4:1f:e7:54:ae:51:7d:0f:39:58:10:08:8e:f8:
                    0a:f8:dc:cd:a1:8e:cc:3f:93:03:4e:da:25:51:bb:
                    09:66:db:84:4d:f1:47:d6:8d:14:79:88:bd:5a:f9:
                    d6:69:87:a1:6b:4b:7e:b4:d4:d2:4c:76:0f:08:82:
                    66:77:42:41:20:20:0f:b5:95:ac:24:b3:6c:61:d8:
                    a0:6e:fe:ac:e2:77:f5:69:36:d1:46:b8:c6:60:33:
                    75:18:52:0f:0c:27:ee:ce:38:ee:df:eb:61:01:40:
                    72:4c:ce:7f:6e:4c:b6:b1:58:03:48:ea:2a:58:90:
                    80:f0:3c:2a:00:df:22:a9:43:26:e0:44:26:45:8a:
                    1c:1b:24:9f:f6:17:50:c2:eb:4c:01:d2:ef:f1:2f:
                    c5:03:1b:03:14:fd:f4:fb:98:ea:2b:1e:a2:21:a4:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:68:2C:B0:2B:7D:BB:5B:46:1A:F0:D2:44:0E:25:D1:15:76:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/ef926c5e-ffe1-3af9-b52d-5468e55e91e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ea:26:63:61:64:0f:aa:a8:0b:28:33:83:9c:82:1c:0f:4b:
         07:6a:20:75:56:9a:7d:c7:cf:fc:06:63:d8:c2:87:83:19:a3:
         9f:32:24:da:99:da:aa:0a:7b:23:84:64:97:ea:31:82:68:ae:
         11:1f:b5:bb:32:75:86:da:8a:87:05:a4:4c:dd:da:a9:05:3a:
         18:c4:74:66:1e:71:c3:f8:a1:fd:83:99:20:50:73:6b:d5:01:
         27:c7:ad:4c:6c:38:1d:3f:36:80:65:cd:47:68:05:69:cf:23:
         59:3f:1f:0d:ab:a2:f7:a8:ce:24:3f:cf:5e:10:b1:b6:3b:c4:
         72:cb:bb:de:d9:db:f6:e4:6c:56:01:1d:c6:6f:cb:9f:7c:99:
         d6:e8:62:1c:65:37:1d:82:92:62:e3:79:31:65:98:fb:44:23:
         cd:7d:c0:c3:30:7c:ed:7f:29:3d:5d:6e:e4:64:2f:c0:4c:fc:
         9d:4f:c0:d9:8b:de:8b:3c:bd:0c:8b:b6:7a:57:74:a2:69:b9:
         87:e9:4b:97:e8:8f:1f:d5:cd:81:40:62:66:af:d6:21:ac:57:
         bb:42:15:1f:7a:7e:7e:f5:25:8a:5b:24:b5:43:77:1d:d9:8c:
         02:78:3b:fa:28:6f:1b:ee:96:11:ef:f4:d7:7f:5b:ec:ef:d0:
         61:d0:2e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:40:01 2025 by rpki-client