Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa
File:                     3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa (raw, json)
Hash identifier:          hF3sZoFw2BB0KXY2ubFFIiN7gUjNyllsZM60JHn+PBU=
Subject key identifier:   73:73:28:B1:37:EE:C7:B8:85:26:0C:8D:7E:AC:26:58:FE:1E:2D:20
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F43285849BF3F66633370D75250637940
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     160
IP address blocks:        2605:9a00:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:66:63:33:70:d7:52:50:63:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=b0d17e72-f4a0-4b0f-b0ee-c4d4a227eff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:52:38:6e:0e:b7:21:b1:cd:b9:b5:ec:89:
                    40:f8:2d:f6:3d:e5:35:7e:6d:f1:3c:35:02:56:f4:
                    60:26:49:6f:73:5f:1f:ea:27:fb:2c:87:64:78:6c:
                    b9:7e:bf:36:10:f7:c3:68:ab:8e:44:34:c3:96:13:
                    ba:2d:bf:b0:32:ba:34:f4:85:93:b1:15:97:b9:df:
                    41:1d:51:fb:67:83:4f:49:a4:b2:e3:08:76:c8:83:
                    e2:4a:d5:63:2c:e4:cd:92:b0:9f:36:b8:e9:77:c6:
                    0c:f7:eb:2b:62:89:b9:6e:88:c6:23:be:a3:53:b4:
                    f1:0c:98:09:2d:19:fe:64:24:d8:5a:af:3d:f8:a6:
                    eb:d8:d5:fb:d0:c3:8b:ef:ab:5b:96:7a:83:b5:e3:
                    8b:db:aa:fa:f8:06:b2:63:9b:37:dc:79:50:2b:78:
                    6e:d9:86:d2:a9:d5:85:4a:cb:b1:c4:6e:c8:40:cc:
                    d4:8f:7a:47:74:08:b1:a8:83:c3:bb:cd:10:53:5f:
                    1e:b6:67:e7:8e:6d:12:5a:98:f5:18:fc:b8:c7:6e:
                    34:87:2f:1d:97:d5:68:26:f9:8b:54:e3:ec:d0:5e:
                    e1:0b:5a:6c:d9:ea:1e:60:30:7d:78:28:8b:f0:08:
                    9d:6e:c3:89:12:d0:09:0a:30:fc:a5:b1:c8:40:d2:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:28:B1:37:EE:C7:B8:85:26:0C:8D:7E:AC:26:58:FE:1E:2D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/3ccf41b2-07e2-319c-a88f-515b9d669ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a00:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:c3:c9:e1:08:22:16:fe:3d:2d:03:00:01:a6:a5:57:0b:
         e8:65:33:e6:40:38:df:ba:ce:39:c9:1e:bb:44:f3:ee:f5:5e:
         d5:dc:c3:70:f0:d8:53:40:a9:05:97:6e:44:d9:fc:33:9c:54:
         9a:26:15:44:ff:63:cb:ad:b7:57:28:aa:dc:fe:20:50:1e:21:
         b3:81:61:45:79:a4:0d:39:4b:c6:aa:33:33:22:e8:d3:40:ea:
         43:29:05:10:e5:e8:90:b1:fa:fa:1c:4e:ce:00:62:6a:bd:37:
         68:92:15:a5:a3:8f:29:6e:d8:9a:20:7f:42:08:56:47:28:aa:
         7f:4e:18:50:41:88:c9:b7:e2:ff:c1:08:e5:fc:78:19:6c:12:
         52:89:73:a5:bd:46:f1:1e:79:aa:0a:22:da:11:21:d0:4e:fa:
         e8:50:e5:a0:38:7d:fb:21:fa:30:30:bc:b8:65:75:a5:e7:ba:
         97:cf:94:34:15:51:b0:aa:f2:2f:91:e5:fc:a8:8c:9b:4a:ea:
         ae:d0:f1:38:32:a8:98:37:0f:cd:96:2b:ab:9e:15:f8:73:db:
         29:f6:bc:18:d6:b8:66:e2:0c:1b:7e:49:e6:5f:d5:7f:c9:34:
         af:aa:a6:73:33:07:1e:12:f7:fc:f7:81:76:e2:f2:49:4b:54:
         65:9c:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:40 2025 by rpki-client