Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa
File:                     9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa (raw, json)
Hash identifier:          XunrAjEQNy0er4nExQJJ2Q7Kp72xpJUN8HK0z64E7Eo=
Subject key identifier:   7C:97:9F:A9:4B:01:0D:E5:15:49:BE:94:E6:5C:99:A7:19:CF:26:F1
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584944694DB1F91E22ED4BEEB800
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        2607:f380:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4d:b1:f9:1e:22:ed:4b:ee:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=fb605383-7a6c-4d95-817e-53d5b4f25cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:c7:ad:8a:5e:da:2c:71:da:8c:92:82:9a:
                    bd:2f:f0:bc:ec:b6:46:04:08:28:98:6f:a1:d5:13:
                    15:b7:f4:d7:27:85:3e:e5:98:21:13:40:4f:ec:f3:
                    26:4d:18:32:77:f8:75:db:68:50:18:f1:aa:9f:ee:
                    c8:f6:65:8a:2a:da:3a:f2:fa:fe:a7:3c:23:75:e9:
                    c5:92:e7:6f:23:21:16:8a:49:b0:2b:a2:20:27:5c:
                    51:d0:82:15:fe:df:f4:0c:70:c2:a6:05:e9:63:75:
                    b7:35:82:60:c2:d7:5e:86:cb:9c:e9:58:1b:f8:fd:
                    ce:86:70:27:5e:72:78:b9:45:e8:ad:dc:fd:c3:69:
                    15:19:85:36:41:4b:04:ee:c0:e7:30:0c:c3:87:f6:
                    65:ba:4e:74:bd:8e:5a:e4:98:d8:4d:e0:e5:d8:82:
                    89:d7:5c:93:2d:83:5c:a5:25:c5:7c:e0:7a:e8:a4:
                    13:42:a6:25:a5:6f:e5:7e:ca:b1:d4:7c:38:54:57:
                    ca:c0:41:57:2f:52:fc:0b:41:63:2e:32:28:c6:77:
                    78:7e:91:da:3c:82:96:8d:dd:79:7a:74:1c:10:62:
                    22:f3:ce:1c:72:de:a4:42:a5:c2:c4:dd:f5:77:72:
                    ff:d2:17:35:50:91:7f:6b:ef:2d:bf:8a:f3:65:af:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:97:9F:A9:4B:01:0D:E5:15:49:BE:94:E6:5C:99:A7:19:CF:26:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:0d:05:5b:2c:e5:d0:82:e8:8c:13:f6:8d:ba:56:a3:a6:
         58:c2:50:e9:46:5f:d5:f6:57:58:53:cd:87:ca:a3:0c:19:11:
         95:e5:6d:f3:43:3a:57:ae:8b:66:61:f0:a3:e1:89:e8:12:de:
         df:f7:14:a9:f1:c0:97:bd:20:96:9a:85:03:60:04:0b:1a:39:
         01:0f:0d:35:f6:43:49:7a:46:11:33:ec:90:8a:00:68:28:1c:
         28:5f:21:74:48:86:47:e4:da:37:a2:a7:7a:22:0a:39:93:1a:
         f5:3c:1b:40:6b:62:dd:06:8e:1f:54:5e:09:02:a1:59:2d:95:
         be:df:da:38:44:49:ce:e5:e3:6a:05:92:4d:ac:3b:47:22:47:
         b7:c6:f5:65:01:59:a4:02:53:0b:23:a2:74:37:0f:c1:58:78:
         fa:3b:6e:e3:7f:b4:30:79:3b:b1:f9:33:bf:30:ee:a5:45:f0:
         93:f4:13:38:0c:27:4c:97:65:85:68:db:7c:bf:df:4a:33:6a:
         f3:bb:2d:14:04:bb:d3:58:b1:6b:e3:54:f8:70:f3:0a:74:a1:
         54:3e:83:88:ad:a3:91:06:5d:a8:0c:8e:03:dd:ee:26:c6:b2:
         1c:67:40:bf:6b:b9:cd:ae:ee:5c:6a:08:d4:52:61:0c:49:09:
         3f:ed:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:02 2025 by rpki-client