Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9279f57d-6dec-3319-abee-e2c7db53b445.roa
File:                     9279f57d-6dec-3319-abee-e2c7db53b445.roa (raw, json)
Hash identifier:          qe0grI6Dzu9cxHf0ZI03N0Ron65GgPNu4hkviHEBHZo=
Subject key identifier:   EE:91:35:9D:D9:55:B9:86:41:78:6C:6C:0B:87:CD:23:BF:95:F7:B0
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848D21142996B5B715C5E57A4F0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9279f57d-6dec-3319-abee-e2c7db53b445.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2606:f4c0:6000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:42:99:6b:5b:71:5c:5e:57:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=89eebc11-7eab-47f2-a5f2-5d8c860e0189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fa:71:a8:f1:98:e5:f7:f3:4d:52:8d:b6:cf:
                    a0:80:28:9a:dc:b1:ab:c7:d1:99:9b:11:99:3f:37:
                    a8:7b:94:f8:35:02:ca:0d:aa:9f:8a:b9:be:9a:de:
                    e9:cf:90:8b:ae:37:aa:ee:9a:80:d1:66:93:62:3a:
                    6b:c2:63:25:c2:d3:89:2b:1c:7b:bc:fe:38:d9:76:
                    ed:a1:e7:1c:0e:1a:ec:43:01:46:bd:16:72:16:28:
                    b5:5e:c2:09:93:65:de:74:ea:14:8c:b1:57:d7:e0:
                    74:5d:8c:54:e1:c4:80:86:93:c8:a7:dd:b0:cd:a0:
                    ef:3b:1e:0c:e6:08:8b:d5:a2:05:46:df:49:0b:1f:
                    42:2b:df:9e:b1:47:e8:76:7d:ec:65:f9:4d:62:18:
                    22:e3:a8:8d:19:85:00:29:24:f2:4f:4d:fc:1e:ba:
                    19:e7:4e:67:42:cb:e9:0e:93:db:4c:68:f9:7d:8b:
                    df:b6:87:74:87:7f:ad:33:7d:28:87:bc:30:22:3c:
                    ee:0a:e7:1b:7d:89:bc:61:ce:6e:45:34:3d:c9:cb:
                    8d:1d:85:53:ad:ad:28:cb:5f:5c:05:39:48:b2:14:
                    cd:20:93:c1:8d:16:8a:80:e1:3f:aa:b4:11:a7:b0:
                    42:0f:e9:6a:da:b9:e4:81:29:0f:88:3b:c2:55:e3:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:35:9D:D9:55:B9:86:41:78:6C:6C:0B:87:CD:23:BF:95:F7:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/9279f57d-6dec-3319-abee-e2c7db53b445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:03:27:ee:e0:93:a6:b1:de:ff:67:b5:8e:2b:d2:3f:46:
         55:10:d8:4f:ed:20:1f:d7:03:7b:78:8c:f6:54:1f:a0:ec:85:
         fb:d8:f1:0f:07:26:de:3d:fd:4a:41:2c:3d:2b:b9:66:fd:42:
         20:23:34:d0:38:73:60:d2:3c:5c:a7:4f:22:4b:b4:cc:c2:92:
         5a:a7:d5:3c:9d:3f:89:c7:4e:81:22:57:c6:30:8a:e6:ad:b6:
         f1:9a:78:6c:ec:0e:e4:09:6f:00:49:82:74:54:e4:8d:f9:84:
         83:2e:c5:98:f8:e2:05:ec:f4:83:38:96:18:dd:91:e4:40:6e:
         cb:30:39:09:79:07:18:1b:ad:e5:88:40:6f:33:49:6a:b3:2c:
         0a:10:c4:be:76:43:1f:5a:50:3a:08:88:e8:5b:a8:05:2a:e9:
         4b:3e:99:e4:36:3e:f3:13:42:e4:fc:42:eb:51:56:bc:0f:64:
         ab:6e:23:9a:79:4f:b7:5b:c5:60:8b:9e:79:2f:56:83:1c:e8:
         d7:32:d1:fa:f3:e3:a2:77:7f:e2:e1:06:5a:11:b0:5c:92:b4:
         5f:eb:de:23:84:4c:b4:0e:9b:b9:c0:b0:74:54:0c:1a:55:13:
         27:ca:83:af:ba:af:0e:10:4d:51:1b:ce:3f:7f:1a:f4:66:cb:
         ba:42:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:05 2025 by rpki-client