Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/19189fc9-d31c-3990-91ff-ec7647f3990b.roa
File:                     19189fc9-d31c-3990-91ff-ec7647f3990b.roa (raw, json)
Hash identifier:          870mEJb2t49oZ+RvpNR/y+agHR2veXs3fqNUMSMcrGY=
Subject key identifier:   FB:77:12:B5:C2:D5:B0:12:E1:8B:6E:BF:52:D1:BD:81:F0:43:28:F0
Certificate issuer:       /CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
Certificate serial:       010D0C9F432858499A6979C3E28586324B502B1C
Authority key identifier: 17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/19189fc9-d31c-3990-91ff-ec7647f3990b.roa
Signing time:             Mon 21 Apr 2025 20:20:50 +0000
ROA not before:           Mon 21 Apr 2025 20:20:50 +0000
ROA not after:            Sun 20 Jul 2025 20:20:50 +0000
asID:                     401658
IP address blocks:        2604:d60::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:69:79:c3:e2:85:86:32:4b:50:2b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
        Validity
            Not Before: Apr 21 20:20:50 2025 GMT
            Not After : Jul 20 20:20:50 2025 GMT
        Subject: CN=297fccfc-8237-4745-b831-46a38fcf23f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ef:05:bb:c0:c6:8b:05:44:d8:b0:15:bb:c6:
                    d4:51:09:ce:1d:dd:af:40:ef:18:02:bb:66:2f:a8:
                    b8:b0:38:7b:d7:8a:e3:e4:ee:e0:16:43:1b:88:1f:
                    eb:bc:c1:9f:c9:fa:36:e1:2e:b8:c0:bf:95:fc:20:
                    5a:94:8a:c8:14:f7:60:ed:83:28:45:e3:d1:1d:82:
                    85:02:83:e5:db:08:17:05:fa:c6:a1:5c:ef:eb:fa:
                    8a:2a:10:36:35:34:e4:f0:67:64:95:27:56:78:ea:
                    8e:e5:4e:00:ea:53:65:bc:6b:11:a8:a7:7d:52:e3:
                    20:b9:a5:c0:36:ab:87:d8:c1:0a:70:de:c1:8c:e3:
                    5d:57:8c:2a:b8:48:9b:04:9e:a5:b8:15:cb:b7:67:
                    63:8e:fa:01:0e:60:62:f3:62:93:bf:55:5f:01:83:
                    a4:01:8a:9c:83:48:af:3a:e6:35:39:bd:29:f5:53:
                    2e:32:b0:02:21:e9:1b:5b:26:9f:13:0e:a6:9c:b0:
                    2e:e1:46:81:cf:0b:6b:bb:95:25:ed:68:54:15:0b:
                    49:f5:4e:9e:87:51:97:0c:e4:2f:12:0c:6f:02:96:
                    e4:00:21:c0:5f:b8:fc:af:85:e1:64:2f:30:e0:1f:
                    28:e7:74:14:09:68:49:1d:8c:21:64:5a:c8:e6:92:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:12:B5:C2:D5:B0:12:E1:8B:6E:BF:52:D1:BD:81:F0:43:28:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/19189fc9-d31c-3990-91ff-ec7647f3990b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.crl

            X509v3 Authority Key Identifier:
                keyid:17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:63:51:fe:c5:2b:d4:ee:4a:d5:70:2a:45:9f:34:87:21:
         dc:7b:57:f2:41:1a:8c:fe:9b:9d:7f:14:1d:54:33:f3:16:1c:
         a5:ff:da:fb:8c:6c:a0:f9:a2:85:05:e0:35:6e:12:f4:15:b7:
         08:01:a2:a7:bd:e0:77:5a:20:5f:60:a6:d8:ce:be:37:14:da:
         40:d0:42:3e:a7:cf:a3:32:9f:c9:26:55:0c:de:6b:19:06:07:
         d4:f2:55:4a:4c:e8:5b:2d:b0:58:1e:80:48:5a:0b:23:af:3e:
         07:38:27:a6:a4:72:18:0d:79:93:d6:e1:c2:db:10:93:86:57:
         57:8f:c2:06:9b:53:5e:0e:d6:de:0f:92:ea:80:af:af:f9:7b:
         55:3c:ae:3b:12:8f:85:50:ee:7a:a4:75:c7:7e:a1:db:09:04:
         e9:48:6d:3f:76:61:93:8e:fa:c1:ee:a0:6e:a5:7e:11:2a:28:
         07:91:6c:64:f9:5a:f9:56:26:d4:7f:ab:da:7d:de:b8:fb:46:
         e8:d3:a4:d6:4f:ce:0c:dd:6c:71:d4:a7:1c:a1:9a:11:45:24:
         78:c1:47:e6:5e:a1:ec:14:a3:3e:f6:0e:c1:08:71:96:20:ff:
         b0:df:16:7f:3c:e3:e3:09:01:7e:38:51:da:bc:c3:f6:62:1e:
         41:7c:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:09:17 2025 by rpki-client