Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/618848e7-0846-37a3-8c54-4633d5dd8aab.roa
File:                     618848e7-0846-37a3-8c54-4633d5dd8aab.roa (raw, json)
Hash identifier:          uoFBxiN76afs63yacG8VkQ1qWurPzJUT83AeaHicttY=
Subject key identifier:   CE:9C:ED:EF:13:A7:0F:51:42:C6:E4:8D:2E:4A:0D:CD:68:94:E7:6E
Certificate issuer:       /CN=98fa46f5-eef1-4569-9795-c233e7e74658
Certificate serial:       010D0C9F43285848E2D11B2325AB1724EC74CB80
Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/618848e7-0846-37a3-8c54-4633d5dd8aab.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     8987
IP address blocks:        2602:802:2007::/48 maxlen: 48
                          2602:802:2008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1b:23:25:ab:17:24:ec:74:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=d76aee15-b110-41ff-8b47-0aa0ad810a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:89:04:53:05:1a:9f:b8:07:a8:d8:4b:fc:
                    08:88:a6:f6:38:b9:84:e1:fa:0e:8f:4e:db:e7:a7:
                    d8:4a:06:62:a9:2e:6f:24:3a:72:82:d2:d7:df:aa:
                    b8:0e:a1:99:5a:ac:cb:8a:5e:23:e3:f7:c9:df:55:
                    e1:54:30:3a:b2:48:96:1b:2b:a1:96:e3:26:c6:ba:
                    5d:4b:89:1f:78:34:87:2d:8d:4a:4e:88:8f:f4:2a:
                    35:f2:da:73:22:89:c9:84:0e:51:b9:ed:54:aa:2d:
                    b9:bf:6a:44:0d:9f:72:44:e3:2a:3e:0b:4d:a8:c6:
                    93:19:98:e1:09:f0:ae:16:a7:a5:4b:54:0d:4a:0f:
                    fe:03:21:49:1b:22:fa:17:af:ed:c2:46:37:95:76:
                    50:c4:02:d5:a7:33:9c:18:6f:ac:9c:cd:86:89:9e:
                    da:d9:13:6c:ca:a2:44:e9:be:7e:f4:b0:fe:94:33:
                    c5:24:4c:00:55:a3:6b:4f:1e:9d:02:5c:f6:d5:12:
                    01:a4:7d:0f:a5:92:f7:f7:c7:db:e4:3c:80:1d:a9:
                    f2:2f:07:e8:ca:6f:9a:ad:59:08:7e:5c:b0:7d:1b:
                    76:22:c6:f0:61:35:00:23:74:cd:6f:a2:c5:7c:91:
                    5b:a2:00:94:3b:c9:b4:8a:50:6b:ec:4c:b4:69:23:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9C:ED:EF:13:A7:0F:51:42:C6:E4:8D:2E:4A:0D:CD:68:94:E7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/618848e7-0846-37a3-8c54-4633d5dd8aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl

            X509v3 Authority Key Identifier:
                keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:802:2007::-2602:802:2008:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:61:97:6f:25:fd:7e:82:58:e6:78:ed:02:3a:ee:ff:00:
         22:c9:43:88:06:ea:ec:c2:2e:0a:a3:55:cb:ec:8a:d9:89:d0:
         16:1c:f5:bc:7c:98:bc:b6:e3:75:e8:ab:b1:fa:84:c0:89:22:
         04:9e:4b:16:5d:61:1d:b8:78:f3:cf:c4:02:c1:18:a2:1f:19:
         95:50:3d:2c:b0:c2:ef:3f:ef:0d:8f:72:0f:16:ec:5d:63:bf:
         d1:f8:04:d8:64:ac:f3:43:31:2f:41:7c:2a:c3:fe:38:e8:0f:
         2d:8e:dc:50:e0:ba:d3:19:33:b0:a7:0b:67:83:f5:9d:fc:19:
         40:bd:86:81:8a:1c:ed:5e:eb:d4:8d:ec:b8:7c:99:02:ec:ab:
         65:cc:d7:79:3a:35:d4:3f:7a:74:00:70:89:bd:6b:1d:76:95:
         b5:eb:58:85:3f:4c:71:c6:a0:cf:87:4a:7f:ed:79:ec:ea:2a:
         9b:cf:79:9d:b2:a0:c6:46:50:4a:0a:f2:f9:51:25:cf:a0:64:
         5f:16:1a:0a:53:71:16:a3:e4:bd:03:74:31:93:06:4d:46:fd:
         8d:63:2c:16:7f:2b:56:51:12:51:23:98:28:42:8e:94:5d:0b:
         40:74:74:06:61:60:2a:62:ba:ae:a5:23:c5:29:87:89:0a:a2:
         cd:50:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:27 2025 by rpki-client