Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4aa6a9d5-3f7e-3e3d-8eb0-fbc47140e2d5.roa
File:                     4aa6a9d5-3f7e-3e3d-8eb0-fbc47140e2d5.roa (raw, json)
Hash identifier:          g1BSL1mgOjk0zYeW2L2Jg/lhGgiaUISprnUbl/6XFe0=
Subject key identifier:   FE:6B:3A:8F:BD:B2:D3:3D:DD:6A:47:71:4E:48:2B:DD:74:9F:E0:A7
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584925B3AA8F767EBAB307A70A40
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4aa6a9d5-3f7e-3e3d-8eb0-fbc47140e2d5.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2606:69c1:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:aa:8f:76:7e:ba:b3:07:a7:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=33298919-b549-4bda-a7e2-b6ba9c942daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:25:83:8d:c6:a0:0d:e9:f9:a8:62:bf:73:
                    94:f6:c8:db:46:1c:4c:dc:8d:07:56:9a:41:d6:0e:
                    74:63:e3:bb:91:22:0c:54:17:b2:e4:4f:03:dc:28:
                    69:9f:45:b5:6a:a3:41:61:72:6b:8c:82:7e:1a:95:
                    46:6a:2f:9b:72:d7:81:a9:33:e2:86:4e:02:32:32:
                    5d:37:f2:64:ce:8b:c6:b7:85:59:8f:c8:83:cd:1a:
                    95:c0:ec:d8:c1:3d:36:1d:69:6f:09:05:9f:41:3e:
                    e5:61:b9:20:f1:ad:e4:bd:09:f0:99:ac:63:1b:69:
                    2e:b4:aa:93:6c:53:f5:cd:54:87:cc:85:93:5e:fc:
                    d6:b0:96:6e:99:22:8f:c6:af:d8:18:18:3e:90:2d:
                    a6:2e:a8:d6:d0:4b:26:d5:60:30:72:f2:3a:34:6c:
                    c7:3c:da:7e:bb:0c:1d:51:81:ba:ec:01:d7:4b:98:
                    45:11:48:78:f3:f9:f1:a3:72:62:7e:cc:2d:73:ca:
                    2f:69:f1:d1:aa:15:80:5e:48:1f:22:13:07:28:a2:
                    0b:88:ee:af:e8:f7:24:e8:a0:57:6e:3d:92:0d:e1:
                    45:74:39:f7:9f:47:09:ea:5f:23:4f:03:c7:d7:cc:
                    39:5b:50:85:65:30:0a:27:76:53:f0:26:74:01:85:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:3A:8F:BD:B2:D3:3D:DD:6A:47:71:4E:48:2B:DD:74:9F:E0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4aa6a9d5-3f7e-3e3d-8eb0-fbc47140e2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c1:1101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:58:95:fb:f8:fc:d8:81:83:b1:9c:bd:de:90:ad:b5:b3:
         50:d1:2e:03:2b:70:df:ec:98:87:4e:3c:ef:57:0c:52:ad:6e:
         66:17:68:8f:dd:2a:99:7b:53:9c:f8:f1:45:7c:05:1e:fe:15:
         d2:43:28:83:c6:ea:08:70:db:34:db:9d:5c:c2:eb:47:76:29:
         0a:93:be:dc:a3:2b:37:5c:f8:86:58:1e:7b:7b:dc:9c:6a:75:
         8c:80:e6:24:51:57:29:84:e0:11:20:9e:f4:58:9c:47:0b:32:
         2a:f2:0d:94:07:a0:a8:9b:3f:9c:09:ed:0b:b7:e7:0a:7f:85:
         bc:d9:b0:d6:63:18:fd:54:c1:8c:04:0c:a6:d0:de:52:23:fd:
         d6:0a:26:06:da:b2:4c:81:ee:ac:ae:48:c8:bc:1d:08:63:3c:
         73:a9:12:e8:96:ef:1a:74:55:a3:33:09:da:f8:d8:e2:81:bf:
         21:7d:63:3f:40:47:fe:a6:ac:65:85:89:e5:6a:86:da:03:f0:
         3f:3e:8c:76:27:77:f7:fe:c9:38:ca:23:01:83:a5:cc:53:c7:
         18:15:d6:ca:85:56:65:0d:68:2e:92:3f:5c:48:1f:2a:e4:12:
         dd:b3:e6:95:3e:44:dd:c3:35:72:5d:80:b6:f5:a7:d8:5b:fb:
         dc:80:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:53 2025 by rpki-client