Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/74a6060a-01ec-3d61-8215-38c756ff2abf.roa
File:                     74a6060a-01ec-3d61-8215-38c756ff2abf.roa (raw, json)
Hash identifier:          TDU08YMjAUsPd+y6XPLTfm/AevygnueNWJQGgRyDH+0=
Subject key identifier:   8A:73:38:91:7A:C3:5B:AE:3B:AF:5F:2D:37:9C:C1:3C:62:E6:02:84
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F43285848AC60D52D4C8EDACE82F6E5A8
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/74a6060a-01ec-3d61-8215-38c756ff2abf.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2605:b040:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d5:2d:4c:8e:da:ce:82:f6:e5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=ee1bff49-c268-4b84-81c4-a7fd37f350f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:6a:1b:8d:8d:8b:43:6a:59:06:da:2b:e0:
                    9a:ee:73:c2:c8:a2:ef:43:86:c7:6d:ac:d7:a6:b3:
                    fd:89:09:88:04:bc:fa:f9:ba:f9:db:c3:10:8f:ed:
                    2f:7c:c4:68:f1:22:86:65:1f:93:e9:98:5e:e3:5b:
                    ec:61:ab:c9:d7:8e:51:e3:fd:d0:b8:52:cd:90:e7:
                    2a:72:0a:0e:b9:c2:77:b8:b9:f8:fa:3c:cd:03:c9:
                    59:38:67:69:e6:f1:e6:ba:6f:fd:dc:01:04:98:97:
                    52:55:11:1a:a8:0c:0d:3e:e4:e2:eb:ad:18:66:d2:
                    7c:3f:df:e4:93:83:eb:e5:32:a9:ba:a9:e9:d3:0e:
                    78:d0:db:25:31:96:f8:6b:f6:ff:ac:b9:b2:ee:6d:
                    56:d7:ca:10:b0:cf:72:32:c7:d0:d3:05:4d:d2:9d:
                    3b:e5:bc:d2:ef:33:be:39:f5:ed:e5:2a:3c:53:26:
                    68:94:f1:29:67:76:ac:f5:35:67:3a:a8:45:58:85:
                    61:56:c9:7f:85:e9:3f:1f:f4:a6:df:a1:4a:a1:95:
                    ba:33:95:34:9f:54:0a:f3:17:8a:41:2a:d6:08:1e:
                    ee:b8:95:44:f2:db:3a:39:09:c7:85:e7:f7:db:08:
                    96:5d:d0:4c:34:bf:e3:1c:80:0e:b5:66:da:1f:2b:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:73:38:91:7A:C3:5B:AE:3B:AF:5F:2D:37:9C:C1:3C:62:E6:02:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/74a6060a-01ec-3d61-8215-38c756ff2abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:8c:c2:e3:2f:df:5f:85:1e:fe:1f:61:95:4a:d8:10:3f:
         b0:b2:0b:a6:80:72:68:3c:77:e8:e6:90:59:2b:3e:12:bd:74:
         fe:4f:6b:c5:d0:e1:19:59:e3:a8:41:1f:1d:ba:c4:c9:25:28:
         4b:8a:da:5a:75:13:31:9f:a4:87:7c:75:de:63:07:33:29:3b:
         42:e0:28:2d:c3:6b:ef:de:7f:f1:2e:fe:fe:c6:cb:81:6a:87:
         83:9c:29:6c:cd:30:6b:c9:c7:2a:1a:52:35:ae:f8:7b:2f:9b:
         a5:1e:50:9b:da:c5:ac:79:d9:79:02:c2:ce:ec:9f:e4:f4:e5:
         78:bf:60:4e:62:39:61:7c:a0:37:03:52:d3:ec:62:d8:27:48:
         a0:67:2d:b1:04:16:88:2a:67:bf:35:68:6b:97:df:8e:42:52:
         3d:66:98:ff:17:cd:43:44:ba:35:0a:00:2e:72:00:ca:65:9d:
         a4:c6:a7:6f:d0:93:b5:ed:3e:9e:e1:99:52:da:5b:68:35:a8:
         9d:75:7f:76:b0:86:ae:38:9d:08:33:eb:81:bc:2a:9f:99:23:
         d1:1c:36:f9:2f:f8:96:cf:d2:3a:6a:a2:5d:7d:b5:4e:e2:9c:
         c9:e4:ff:4b:61:f5:0c:94:cd:4e:d2:ca:3d:99:13:a5:69:8c:
         3c:c5:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:19:53 2025 by rpki-client