Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
File:                     d6139039-6fc7-37b5-b79d-4f80d949e210.roa (raw, json)
Hash identifier:          qaQ6its/ZcFUQzmOlTG8lJRwkDvjEnFCAFf+PjNsUFg=
Subject key identifier:   56:3D:D1:78:14:BF:84:7C:D4:BA:B9:C3:FE:95:66:20:41:0F:E5:D3
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584988CF196029F11CBDC5D41110
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     2381
IP address blocks:        2001:4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:19:60:29:f1:1c:bd:c5:d4:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=42cb56b0-98fa-42cb-a078-af54096a51f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:14:10:2f:87:dc:36:24:b4:26:5a:ae:2a:
                    ae:c0:a9:3a:82:7a:22:ed:6f:58:d7:f1:5b:2e:67:
                    1b:3a:99:82:e4:41:f7:31:20:c0:a1:08:d4:d1:37:
                    ed:ec:ed:b6:52:6b:3c:aa:d2:66:aa:b0:38:c0:95:
                    50:c0:54:8b:84:c5:30:2f:f4:b3:2e:38:7b:69:d0:
                    04:6f:f1:0c:17:83:e3:11:81:36:ef:9c:29:79:c1:
                    bb:2e:31:68:58:b4:fd:df:22:da:93:3a:c9:06:4b:
                    12:88:52:66:ef:9c:a8:b3:06:9c:77:54:bd:b2:61:
                    c3:f7:8c:2d:2a:d9:76:c8:48:8a:54:69:cb:b7:ad:
                    8a:2f:5f:ae:fb:ad:86:f8:c6:ad:d3:41:cf:3c:5e:
                    eb:47:dd:33:9c:2d:4a:45:ce:48:de:ae:43:fd:07:
                    70:fb:22:d1:a6:04:c8:0d:e9:1f:fb:e5:0c:d8:e0:
                    f2:59:ab:2e:ff:a2:d1:b4:e1:b0:af:32:5e:81:3c:
                    53:66:54:9d:93:47:19:65:21:17:97:ed:63:03:df:
                    51:07:65:be:8e:b7:d1:99:85:a4:ee:db:56:15:9b:
                    e3:ef:8f:ba:f1:2a:ff:75:e1:0d:33:66:9e:96:70:
                    f4:a1:a9:4d:ec:a5:7c:04:d6:d0:d7:f1:27:81:18:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3D:D1:78:14:BF:84:7C:D4:BA:B9:C3:FE:95:66:20:41:0F:E5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:88:87:77:c8:df:f2:38:e1:c4:88:48:db:98:18:b0:8c:
         85:2c:b9:09:f8:ab:d2:3f:60:1d:7e:43:ee:1b:f4:95:0c:6b:
         50:ec:cc:3e:50:65:03:db:65:7b:1f:7e:de:bf:28:7d:9a:9c:
         d3:a3:4e:11:da:3b:c2:14:22:61:4f:1d:43:4a:3d:e7:f7:ca:
         6b:98:2b:ba:4f:dc:ce:b7:ad:a7:9e:60:9c:89:69:65:21:c2:
         8d:35:72:3c:90:40:96:49:fa:fd:0a:f3:59:5f:af:2c:85:d8:
         0e:03:8e:ac:35:f9:1e:64:ef:1e:22:c6:83:3e:e6:33:4f:09:
         fd:2d:f2:80:97:41:97:5a:48:4b:d7:d5:4b:32:a8:bb:7b:11:
         b2:44:37:56:bc:f3:c9:ca:98:a0:52:e6:40:32:e0:dd:5c:06:
         e6:26:91:d3:d7:49:36:b0:15:8c:7e:02:45:36:62:47:7c:04:
         3f:8a:69:ee:f0:3d:ea:d2:28:40:9c:91:42:d9:1c:8e:7e:9f:
         cd:81:a7:25:7b:f4:9e:e6:70:f6:a4:0a:cc:96:97:62:e4:80:
         00:b1:36:a6:fc:c7:98:9c:0e:11:15:66:0f:6e:9a:0b:35:9d:
         51:f4:3e:83:a0:84:8e:1e:3e:64:a6:de:d5:08:e2:17:30:c7:
         74:d6:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:33:40 2025 by rpki-client