Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa
File:                     7884191e-e9da-384d-906a-28eba5a82899.roa (raw, json)
Hash identifier:          vyPbUtZ1SFYEyAxjJd2cGxppC8tnSCBeKPq5t/h8Vg4=
Subject key identifier:   D2:34:24:00:5C:0D:05:1F:D4:79:0E:79:E7:D0:9A:0C:36:95:3C:57
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C9EA8916910C21C39120
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        2001:4c8:1025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c9:ea:89:16:91:0c:21:c3:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=9964e680-ee56-435f-b727-44cde69d4ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b1:5c:4f:fd:3a:86:59:bf:0b:b6:aa:8d:a5:
                    aa:3b:6d:f4:15:a8:04:60:ea:a3:24:ca:48:04:21:
                    47:c2:34:33:e8:bc:22:7f:29:61:ac:b7:a7:b5:e2:
                    5f:20:e5:c6:d1:f9:7b:fa:f3:11:e5:a7:25:7d:d2:
                    86:6c:64:fb:20:bf:52:ed:54:15:9b:dc:18:60:ae:
                    e7:82:84:2e:8d:a6:de:0b:88:1e:41:7c:f4:b7:9d:
                    d5:44:6c:7d:df:81:c2:1a:b7:df:e9:bf:87:3d:53:
                    fb:a0:a8:ac:b2:0e:ef:d0:0d:0b:1a:12:a6:b7:fa:
                    6f:2a:74:4b:45:c0:ba:20:dd:f7:45:ab:0a:53:aa:
                    b9:17:aa:63:37:93:8d:a9:5a:50:fd:ff:77:f0:93:
                    28:cf:27:9d:23:35:01:29:08:00:9f:91:a7:53:5c:
                    a2:77:00:a1:1d:e1:54:fc:5e:ef:65:32:69:2c:e2:
                    df:fe:37:a6:ff:97:bc:24:d8:f1:2f:c5:01:8a:3e:
                    ae:fc:df:38:f8:fa:18:bc:8f:c1:e2:c3:3e:18:64:
                    e9:50:24:65:19:a1:0a:20:73:6d:bb:7a:b9:11:19:
                    d2:13:de:7a:5b:73:3b:ad:5d:83:7e:2c:e8:66:17:
                    db:b3:a0:ab:fe:b3:1c:2d:bb:19:08:75:65:af:0c:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:34:24:00:5C:0D:05:1F:D4:79:0E:79:E7:D0:9A:0C:36:95:3C:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/7884191e-e9da-384d-906a-28eba5a82899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:21:7e:b7:8d:7b:ab:72:72:d8:9e:25:80:32:6d:4b:4c:
         79:a1:35:55:84:65:04:29:8d:33:ee:ca:bb:7f:75:8a:98:65:
         ec:62:14:cf:93:4d:cb:94:06:44:50:5d:ba:f3:6a:dc:01:29:
         3a:e8:8b:22:13:5f:a3:dc:c5:61:5a:2e:76:42:47:68:ae:21:
         66:41:ae:79:e8:76:5a:0a:5b:a5:d5:53:8f:73:81:26:20:a0:
         8b:12:d2:0c:13:b3:20:12:31:c9:cb:7f:7c:71:6a:08:eb:2d:
         f5:ce:69:2c:e2:a6:56:61:2f:96:46:6f:30:a3:ac:de:26:23:
         b8:c8:ab:35:e9:ff:92:1b:c9:8a:11:33:ce:6b:d6:06:57:be:
         af:20:07:8b:59:f1:3f:09:da:a1:70:7a:c2:e3:8f:e1:7b:e3:
         5e:2b:e0:b2:18:83:07:82:cf:0c:58:4d:a5:bf:70:a1:13:5e:
         f8:39:ba:38:ec:90:15:99:27:67:95:6e:76:12:ee:e4:a0:2c:
         e0:a9:91:3d:1f:34:c8:fa:3c:92:53:82:eb:fd:d5:09:7e:f8:
         fd:94:ef:bd:f4:d3:ef:95:30:ee:fb:33:8a:49:d0:b0:6a:fc:
         2d:db:ef:6d:1c:2f:fc:15:1d:fe:52:eb:d7:90:dd:2a:90:6f:
         84:f3:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:43 2025 by rpki-client