Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
File:                     dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa (raw, json)
Hash identifier:          TfI6AmNH0O2BSCF/Z/boTmlTFcGTYuWsyBStLUftNng=
Subject key identifier:   FF:B5:6D:D8:F3:D4:8C:A5:9C:8C:B2:2D:99:DB:E4:B9:4E:D8:FD:8F
Certificate issuer:       /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
Certificate serial:       010D0C9F43285848A400BF45ADC8DF5F6AB96FC0
Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2620:135:7018::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bf:45:ad:c8:df:5f:6a:b9:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=891cb1c1-a7a3-4248-92eb-adde9c9ded1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:32:a5:64:d7:02:d9:d1:28:08:d1:9a:eb:
                    1c:18:31:d3:b7:2e:0d:e9:23:6f:ab:6e:6e:30:3a:
                    84:2a:8b:ae:ad:44:cb:98:1a:60:bc:53:5f:74:c3:
                    73:50:27:2d:bb:02:72:82:cc:7d:a6:58:56:45:99:
                    0e:c8:b6:52:b8:03:9f:44:93:56:75:61:38:ad:b3:
                    55:92:0a:c8:04:93:b1:b7:12:50:b3:e5:4d:64:98:
                    a3:25:03:10:8e:6c:4b:5a:b2:4e:52:62:d0:51:a7:
                    eb:06:6c:87:5c:90:79:09:49:a6:8b:af:c0:c8:e7:
                    f1:48:c3:4b:e1:9f:4d:0b:89:fe:c7:ed:97:55:bd:
                    a6:1b:70:f0:d4:98:41:c5:08:30:0a:57:3b:f0:0a:
                    6f:9a:12:0c:cb:b9:bd:36:b4:ea:88:b5:37:5e:0c:
                    3f:43:ac:bb:b1:f3:4d:ac:94:23:f7:2b:cb:32:50:
                    7c:98:81:a1:4a:7c:d5:c3:4b:b2:9f:10:fe:a5:e6:
                    b4:fe:7b:64:a5:ba:e4:a1:87:9a:87:9c:9c:69:73:
                    93:de:58:35:94:2b:82:c1:12:f6:b3:40:32:c5:1b:
                    32:7d:ba:1c:62:94:83:d7:50:6e:ce:5e:76:90:44:
                    dd:31:af:c1:8c:73:95:43:99:6a:f7:89:8d:bc:49:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B5:6D:D8:F3:D4:8C:A5:9C:8C:B2:2D:99:DB:E4:B9:4E:D8:FD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/dca4f651-cfff-3cac-8e9e-569b7ca4bc7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:7018::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:c0:1e:b5:de:9a:44:8f:37:bd:89:90:fa:a0:86:9e:5f:
         4b:ef:98:e1:b5:5e:96:84:1a:03:0d:83:e0:87:3d:a2:dc:93:
         ae:ee:cc:4e:28:20:89:82:a7:8d:9e:f9:5d:4c:78:df:ff:73:
         f0:e7:25:f1:36:f8:ed:93:b1:53:38:65:42:e5:d8:e0:65:34:
         59:17:7e:ab:97:5e:cc:a8:b7:2c:74:cd:c3:83:23:15:2c:84:
         fb:6b:3c:36:27:82:9c:62:9d:2c:95:bc:e3:75:f3:00:a8:96:
         3f:22:17:f0:9b:0b:2e:f7:da:08:7b:c7:07:0d:a5:63:03:8f:
         fd:12:a6:dd:74:e1:b4:f0:07:0b:8e:49:83:76:8b:34:d8:e5:
         6a:f3:4e:6e:0a:d6:1c:8d:3c:9b:c8:c6:59:9c:0a:b7:d8:2e:
         22:d3:07:6f:6e:83:77:32:43:86:ac:1d:57:11:68:63:a9:88:
         a7:d3:a3:30:f2:ca:90:78:e1:46:82:27:e3:77:c0:d0:ba:4e:
         30:d8:14:d1:ef:de:3d:e9:9c:b6:89:6f:00:30:16:df:3a:7c:
         e3:ff:e5:d1:2f:9b:d4:66:eb:4d:b7:f6:98:d6:38:51:a8:fc:
         03:30:fc:9f:1e:c5:50:5c:a3:e2:46:9f:83:d0:ae:51:75:fe:
         5c:18:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:50 2025 by rpki-client