Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa
File:                     9473f164-1fbd-31b5-b967-faf52a6b40d2.roa (raw, json)
Hash identifier:          HHoV8DU/3qxUY43iVH2ALz0USWcDA5wMZonXpT7SzPs=
Subject key identifier:   F7:33:7C:1A:02:C1:F8:31:8F:84:A4:21:E7:05:B2:6A:9A:BC:46:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849780F1A54E459C06F5B1BFA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        2600:1417:75::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:1a:54:e4:59:c0:6f:5b:1b:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=9b239fb5-9314-41b5-97b3-828d45bee098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:88:6f:82:a8:06:fb:bc:19:54:e4:43:3e:33:
                    95:cb:40:25:0e:bc:75:ed:36:c2:ac:b0:5b:ae:f1:
                    ac:de:67:e3:09:54:4b:5b:1c:1a:cf:4c:f2:0e:e9:
                    10:bf:9f:db:1a:ed:81:3f:5f:fa:c9:fc:9f:92:2c:
                    86:ab:fb:96:3c:08:61:69:90:97:c4:9f:64:81:01:
                    ed:72:fe:41:62:d9:b8:8b:5e:4d:84:1b:ba:1d:7c:
                    ee:1f:09:11:47:60:ea:5e:10:5a:8e:a7:f8:9b:bf:
                    79:6c:50:0d:42:74:dd:94:f0:ae:82:9a:09:d2:2d:
                    a1:3f:ec:f4:31:c5:e2:a3:d6:4a:16:e1:d6:43:ab:
                    24:00:8d:0f:4a:ee:42:ff:7a:2d:a2:0a:4e:86:33:
                    8a:df:e7:ac:6d:2c:9d:4b:4b:f6:5f:2a:63:2d:23:
                    ba:27:f1:c0:b5:d9:76:1a:54:81:fb:d0:a8:28:05:
                    ad:7c:32:87:35:2a:b2:61:d6:04:5f:8d:7b:b2:21:
                    dd:a3:d6:78:24:7e:53:b7:e9:0f:ca:ca:09:cf:b7:
                    81:4c:e8:97:71:c5:b1:b5:53:16:64:8a:b0:eb:21:
                    e6:b5:34:c8:83:75:85:be:1b:65:68:1f:61:d8:3f:
                    ec:c7:8c:19:d6:4c:20:af:f9:33:87:db:6d:86:70:
                    1d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:33:7C:1A:02:C1:F8:31:8F:84:A4:21:E7:05:B2:6A:9A:BC:46:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9473f164-1fbd-31b5-b967-faf52a6b40d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:75::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:af:6e:95:a1:bb:2a:64:3d:d9:df:30:9f:d9:f9:d8:cc:41:
         86:fd:9f:31:5c:78:cb:b4:aa:fe:33:ae:0e:fb:c3:43:9e:71:
         e7:8f:5a:6b:6e:85:51:ab:bf:2f:ab:98:8a:c2:71:49:72:f4:
         39:1d:fd:73:df:0e:52:5c:52:20:78:7f:6e:59:be:02:01:ce:
         99:7f:79:1a:3d:9f:2d:d9:03:c4:c0:29:20:2e:7b:88:af:a0:
         6d:6d:93:89:e7:31:d9:3a:f6:ce:06:c5:4f:43:63:c6:9c:32:
         36:fa:21:ee:71:8e:d9:e0:69:33:e7:8a:a6:3e:46:e3:c1:16:
         28:33:d9:12:1f:5a:2e:f9:01:dc:b4:ad:e8:e7:e7:d4:69:01:
         53:43:97:74:8e:6a:10:15:1c:60:2f:46:e3:de:8f:a3:53:47:
         63:61:d8:4a:bb:f0:d7:63:26:06:e4:d3:e6:88:5c:ad:c1:6c:
         8a:d7:42:e2:65:dc:d9:b1:58:7d:a9:d9:88:bd:39:a0:c4:e1:
         28:b3:35:8d:8c:e4:8f:32:40:c1:5d:a9:7d:69:a2:ee:9d:77:
         60:28:59:b6:a5:9a:a7:34:0f:39:85:e0:68:4d:c0:95:a5:3f:
         82:59:7b:41:81:2c:6d:93:d9:0b:b8:c8:7c:c6:36:8f:de:04:
         fb:0d:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:01:44 2025 by rpki-client