Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa
File:                     0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa (raw, json)
Hash identifier:          qzaoOztdpXxIY9jx3Qkwr66HSje9/J2m/rrbReXBZRA=
Subject key identifier:   42:4F:50:F1:2C:85:9D:55:28:AE:35:33:E0:73:73:26:0B:3D:E3:FE
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BAD77161DD2B6C0D3E4D60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        2001:4860:4823::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d7:71:61:dd:2b:6c:0d:3e:4d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9aa171d0-f341-4edd-83d4-6dd21a55e559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:36:5a:23:1e:2d:27:ab:f4:82:0a:7f:73:
                    26:78:f1:0a:ad:89:d8:15:4b:7f:bf:09:3f:47:f1:
                    33:34:97:fa:49:76:14:23:f3:62:ba:69:ef:d9:c5:
                    7c:71:39:92:f2:19:05:c7:b4:bc:d0:f3:cc:c4:73:
                    d6:a3:44:54:94:61:e0:ab:57:95:98:ce:c5:08:9c:
                    f2:03:50:53:a8:0e:58:c1:3c:93:ce:32:35:fe:ed:
                    d8:78:f0:fa:c1:a8:76:83:ae:bc:db:05:30:12:10:
                    79:b5:46:a3:20:02:69:11:8a:e3:5f:f8:8b:a2:2c:
                    41:b1:c2:3c:7a:a7:cc:99:97:62:4c:2f:9f:1d:b0:
                    55:f9:e9:c6:c0:d0:d4:ed:e6:c1:6f:45:13:e0:83:
                    9a:ba:08:58:8f:f1:74:83:0a:eb:82:bf:b7:6a:d3:
                    cf:25:aa:13:6a:8d:7f:de:76:d7:35:7f:66:cb:ea:
                    c5:c4:78:08:86:a6:6f:a4:06:f7:7b:88:ac:8c:65:
                    53:c4:4e:50:b2:41:01:f0:c8:95:d6:ea:84:40:86:
                    35:b4:16:32:17:33:1f:5b:44:ae:66:8f:bc:4e:9a:
                    ce:54:f1:52:af:21:29:91:52:d4:34:31:72:52:79:
                    9b:11:ea:56:3b:a7:88:d4:35:e3:b9:ee:52:59:6b:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4F:50:F1:2C:85:9D:55:28:AE:35:33:E0:73:73:26:0B:3D:E3:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:4823::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:62:6d:98:27:da:e6:8b:cf:64:59:46:a7:1e:bf:b2:d3:
         0e:c4:53:fc:5f:d7:2b:06:c2:83:41:c5:80:27:23:df:10:37:
         b7:1b:94:b3:7a:8b:ac:6a:e1:ed:fc:b0:07:75:ea:8a:d3:8f:
         2b:5a:47:9b:af:ed:b8:8d:0e:f4:ad:d3:16:12:98:45:46:24:
         3b:69:9e:4d:d5:da:dd:85:ff:fc:50:28:a7:77:0d:84:bd:d9:
         8a:f8:f2:e3:27:c7:23:59:ea:d1:1f:16:1c:71:41:6b:27:70:
         d8:ca:a3:89:b7:80:7b:a2:46:85:d8:8e:38:bc:10:97:33:5c:
         2b:90:02:b7:b4:d6:09:f9:3a:43:f3:85:19:b3:7d:1a:79:e7:
         c6:19:d0:3f:58:d0:11:8c:d9:c1:f8:b0:ed:9f:89:f9:2d:3c:
         05:5a:bb:5e:3a:e0:9f:c4:bd:af:4e:d1:c1:08:cc:ca:75:02:
         1d:17:28:ec:91:3a:a7:58:90:f6:a8:46:7e:66:60:c1:68:cc:
         ba:35:bf:5e:0f:3e:e8:2f:5d:e6:8c:d8:b2:44:63:7d:ea:ae:
         d7:67:ff:8a:c0:cf:2c:11:4a:8f:58:e8:33:99:05:1f:43:fc:
         5a:79:b6:4f:67:3a:18:94:1b:b3:4f:3d:fa:18:e9:fd:4b:17:
         dd:c3:34:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:48:25 2025 by rpki-client