Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
File:                     298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa (raw, json)
Hash identifier:          2wCgxK0In3SIvNm6ChMWDeo97cERkKIeHcuh+nq3eKs=
Subject key identifier:   C7:0B:E0:DF:60:99:9E:AE:7C:99:9D:8F:62:C3:2A:2E:83:C1:68:32
Certificate issuer:       /CN=29dfb106-65b1-4e83-81d9-8b97730bd706
Certificate serial:       010D0C9F43285848D211370AAB414BDFAFBAD580
Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     14333
IP address blocks:        2602:f793:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:37:0a:ab:41:4b:df:af:ba:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=9147bb6c-1cf9-422e-a8a1-3b7c20e18ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:99:aa:fd:b2:77:0e:97:6c:f4:9e:32:eb:
                    96:5b:c6:50:3c:65:25:1d:89:1b:f8:0b:f8:d4:d9:
                    a8:30:30:b2:a2:14:85:61:d8:c2:a6:0f:fe:f5:60:
                    dd:01:ea:83:36:73:6c:53:e8:16:c3:fc:87:75:76:
                    1f:25:89:b2:b2:e9:56:33:93:c9:27:b3:58:e3:af:
                    a6:71:dd:dd:0e:65:a0:4e:7f:34:a8:46:92:52:19:
                    5a:af:db:83:0a:86:69:d7:b6:0f:3d:bc:0b:53:01:
                    b3:29:12:54:33:5d:bc:9f:c3:c6:34:0b:bc:c0:07:
                    82:29:1c:a6:9f:54:d7:97:70:92:62:3c:68:2f:00:
                    22:51:22:36:05:d2:1a:c5:cc:8a:a1:fc:db:da:4c:
                    71:84:c3:a1:b1:ed:05:36:99:05:b0:aa:c3:9d:3b:
                    11:5d:18:c3:59:98:d5:f9:74:2b:be:79:38:fb:f7:
                    ac:e9:12:5b:48:e1:f8:ab:36:e4:cf:ed:d1:66:6f:
                    c4:ba:69:7b:c4:b3:27:9a:c4:e8:ca:03:a0:32:a9:
                    a6:08:7d:2d:9f:0b:5e:cf:f4:b3:f8:f3:cb:12:4b:
                    3a:d4:57:b7:95:10:a7:bf:f0:e4:7e:17:b3:98:f2:
                    ef:c0:b6:12:06:57:85:9b:88:ac:c8:ca:8c:4e:bf:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0B:E0:DF:60:99:9E:AE:7C:99:9D:8F:62:C3:2A:2E:83:C1:68:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl

            X509v3 Authority Key Identifier:
                keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f793:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:34:8c:4d:ff:ee:75:e7:d3:7a:61:f7:3a:5c:9a:28:5a:
         c0:07:32:03:73:8a:d6:b0:82:1b:96:56:9e:db:75:2e:f5:e6:
         93:52:e6:cf:37:0d:0c:83:2e:df:5e:e6:9f:e7:40:80:51:de:
         d0:eb:8a:80:2d:68:c7:d8:ab:ff:05:38:57:ad:54:cc:98:56:
         91:ba:a2:99:58:d5:bd:d9:d1:93:5f:07:c1:45:a9:c6:fd:0e:
         cc:b0:5d:ce:55:c7:8d:c2:82:42:27:75:2c:85:89:17:34:74:
         dd:13:1a:3c:93:e8:79:1f:fa:ed:d6:49:22:8a:0c:1f:09:13:
         98:9c:01:9f:36:be:58:2a:ed:2c:8b:d5:f6:3e:63:d3:e9:ad:
         2e:54:58:09:ab:f0:5d:eb:89:3e:92:97:64:c1:43:df:dc:64:
         fc:66:b9:17:16:b2:62:ab:19:23:57:6f:64:78:c7:07:c8:f3:
         eb:5f:8e:bc:e1:fe:52:58:0a:9a:6a:90:85:61:68:10:e2:d5:
         d7:b4:63:7c:9e:55:ec:f7:2a:21:d2:98:d7:de:30:52:4c:6e:
         0b:27:63:4b:80:8b:89:fc:77:1f:75:93:7c:18:e9:6f:eb:e8:
         88:f6:c2:57:87:a4:e6:d2:50:dd:81:13:17:21:12:58:0e:16:
         20:0b:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:34 2025 by rpki-client