Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
File:                     44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa (raw, json)
Hash identifier:          eB2NXiB83NXYJ9acmlui/Ac23oTt2Hd+CdaiYdFBuCA=
Subject key identifier:   E8:61:F3:0E:74:E8:50:93:EB:E8:29:DC:01:26:8F:22:12:9E:E9:7F
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F43285848D7A651ADF33C9B072FB0F200
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     12198
IP address blocks:        2602:f919:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:51:ad:f3:3c:9b:07:2f:b0:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=3bcece3a-2ad3-4891-ad58-5eb9e3fb92e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:1a:ba:e8:9b:d9:e3:8c:3d:dd:48:24:02:
                    55:63:1c:c4:6a:0b:ee:3c:64:07:e5:38:78:c8:24:
                    7c:bb:df:71:9c:e3:16:4c:85:73:b4:c6:bd:8b:76:
                    97:4b:d9:a7:80:a2:ae:2b:c0:0b:43:95:97:51:53:
                    6b:bf:d9:14:4d:68:c1:74:10:eb:8e:07:b0:a1:65:
                    24:df:89:2b:d1:e5:7c:9c:8c:e1:5f:83:72:5a:09:
                    0d:fa:eb:bc:e2:59:f3:64:88:a1:cd:b3:f1:57:e4:
                    db:8c:f5:2c:59:8c:09:e9:82:e7:36:55:7b:3b:70:
                    db:85:88:18:2a:c6:e0:8e:81:d2:88:6e:87:7c:b3:
                    0f:b4:51:c1:c6:3d:9d:be:f3:c3:72:c1:e8:40:c8:
                    f5:42:a9:de:e7:a0:49:56:99:a1:dc:c7:88:56:dc:
                    e8:10:00:f2:cc:86:27:d2:b7:9c:34:aa:14:9f:7d:
                    f0:e7:be:08:63:d4:86:2f:dc:a9:fd:ce:a7:35:81:
                    7a:78:ba:ef:88:d4:3e:78:aa:69:d9:c8:59:ed:e4:
                    05:4a:94:7f:f4:04:0c:a4:48:1b:d0:f7:44:2b:40:
                    64:63:f2:d1:41:bb:45:dd:2d:ae:4e:f8:59:ed:b5:
                    b3:bd:f0:9a:db:fb:fb:aa:f1:01:af:c6:d4:2b:81:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:61:F3:0E:74:E8:50:93:EB:E8:29:DC:01:26:8F:22:12:9E:E9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:e6:5f:41:4c:7d:76:43:03:29:c7:38:33:d6:66:2a:4a:
         c8:9c:f7:76:82:01:c5:61:25:32:d7:19:e2:d4:0d:fe:6e:6d:
         ba:99:5d:fc:0d:02:b4:0c:be:f6:df:31:d5:5f:9a:c6:3f:a7:
         25:b5:fd:f5:d0:97:46:7b:f6:04:4b:e4:99:1a:e7:ca:62:9c:
         83:97:c2:34:29:f3:a4:3e:b2:ad:a9:7e:6d:5d:02:2d:b4:02:
         cc:fe:61:e2:b3:f6:91:66:a0:e0:f4:2a:d5:75:7c:13:0e:cd:
         95:fa:b6:91:d8:a4:f4:aa:7b:9c:42:97:39:c2:ee:16:8b:05:
         5b:e7:23:12:e7:3b:f8:04:01:e7:41:f8:69:0f:78:ce:06:85:
         14:47:8a:f5:64:f9:e4:ea:5a:a4:02:d6:f8:12:91:84:a1:3c:
         da:7c:64:22:4a:c2:33:dd:3a:d1:ea:90:6d:38:75:2c:f0:aa:
         67:15:aa:49:08:f7:82:d5:73:20:18:91:2c:b2:c0:33:dd:5d:
         2e:bb:8b:f6:13:da:da:7d:24:13:e0:eb:de:db:30:a4:4b:ad:
         22:56:1f:7a:d9:13:02:ee:16:78:0b:db:1b:26:4a:d3:3b:be:
         2c:2e:90:b6:3c:3e:32:f1:06:34:f9:84:00:f4:ae:7f:88:42:
         ce:87:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:17 2025 by rpki-client