Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/ab808927-e82e-3232-b1a2-f598e94a9bf9.roa
File:                     ab808927-e82e-3232-b1a2-f598e94a9bf9.roa (raw, json)
Hash identifier:          aXKbiSipFc0a/0rR2KavMwzna1MaUfkvOjhtCmMa0ww=
Subject key identifier:   6E:55:2A:CD:A0:7A:80:9E:DB:6A:EF:BF:1A:9E:B6:CE:CF:78:0C:8E
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F43285848960B531C693AAA08A4D98B60
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/ab808927-e82e-3232-b1a2-f598e94a9bf9.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2601:9202::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:53:1c:69:3a:aa:08:a4:d9:8b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=e011d679-0cc5-4ff2-b957-988c63e571bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:aa:68:9a:cf:a3:5e:02:e7:97:98:d1:e6:
                    ba:6b:68:c4:28:40:14:d8:5e:02:fc:be:d0:a5:e4:
                    99:60:a6:a0:3d:d9:06:90:e4:60:b4:52:75:1a:40:
                    d1:e7:78:65:c9:52:e5:c5:1b:a5:b4:57:7b:48:8a:
                    32:0f:f4:d3:5e:89:5a:b3:85:41:be:be:86:77:93:
                    37:c3:97:69:69:3b:d4:b3:03:31:ca:ed:c6:d0:49:
                    d6:05:65:e8:49:f2:f9:bd:bf:ac:31:59:53:70:11:
                    1e:02:ac:74:f3:fe:f6:bd:ed:b9:00:7c:c5:0a:05:
                    2e:62:81:e2:98:1a:d3:35:2b:7b:e0:9a:d2:94:ff:
                    35:d2:ee:b3:65:fb:c1:9e:6c:3f:1c:62:57:ba:43:
                    02:53:98:66:8e:84:ab:6c:70:ee:44:5b:24:0b:5d:
                    4e:18:49:5c:b7:50:ea:41:41:f6:91:0e:43:94:7e:
                    37:7d:65:24:8d:f3:d3:7b:f4:20:6b:8c:32:e0:84:
                    7b:41:92:6d:42:5f:49:32:6c:07:d6:d5:c1:d8:fb:
                    c9:d4:0c:e3:0e:34:c8:fa:9b:b9:4f:44:79:73:be:
                    48:cb:78:59:60:ae:19:ca:e7:b5:a5:be:89:aa:20:
                    0d:d3:f2:ec:3c:62:2d:2b:26:57:44:45:68:1b:73:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:55:2A:CD:A0:7A:80:9E:DB:6A:EF:BF:1A:9E:B6:CE:CF:78:0C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/ab808927-e82e-3232-b1a2-f598e94a9bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9202::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:36:09:da:3f:89:a8:8d:80:5d:db:f9:f5:bf:78:65:b9:ac:
         c4:4c:58:f8:b7:6c:c4:a7:62:83:94:70:4b:dd:86:7d:b8:5d:
         f0:df:c8:63:d7:19:aa:15:b7:d0:9e:cd:f4:1a:14:e7:87:29:
         3c:b4:8f:8f:c3:1e:d1:fd:d3:67:5a:a0:bb:e3:d8:7c:ff:ff:
         50:c3:b7:11:0a:cf:45:e7:47:7b:46:e1:fe:ec:c4:11:69:c2:
         98:60:89:bf:5a:9a:ff:9d:8a:39:ee:b0:4d:1c:7e:68:6c:3a:
         e8:f2:15:d0:22:76:6b:26:f5:3e:9a:b4:55:16:1e:ac:cf:9d:
         4c:3c:3f:43:0e:3b:be:b7:50:af:46:4d:88:7e:70:8b:14:0c:
         03:d4:b4:76:6e:1f:9e:ae:a7:27:be:7c:2e:1b:24:54:ef:74:
         ea:5c:4b:30:87:eb:d5:61:76:85:18:77:fe:7c:c2:82:66:b4:
         80:3e:31:36:ba:df:b1:15:ee:cc:31:91:f9:ff:82:26:f3:c2:
         53:54:f7:ba:ef:bf:f0:35:9f:d7:14:69:44:4c:f4:f1:2c:53:
         87:80:3c:23:4c:b4:21:9b:fa:c7:93:fe:71:59:a4:b2:74:e4:
         06:50:24:1e:6c:30:33:9e:d8:f8:e5:fb:4f:7f:f4:9d:22:b6:
         e7:cd:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:32 2025 by rpki-client