Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/030ee170-33f1-34f8-b5a8-14ffcdf5c169.roa
File:                     030ee170-33f1-34f8-b5a8-14ffcdf5c169.roa (raw, json)
Hash identifier:          WHiRESfbevSvafGh6MifVRhvbx8wFO84HTeNnEsaTAE=
Subject key identifier:   3A:AC:82:69:C6:32:20:A0:3E:E8:12:5E:F5:BC:EF:F5:96:6D:1E:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213471421E10CEB14CEE29C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/030ee170-33f1-34f8-b5a8-14ffcdf5c169.roa
Signing time:             Sun 09 Mar 2025 10:21:10 +0000
ROA not before:           Sun 09 Mar 2025 10:21:10 +0000
ROA not after:            Sat 07 Jun 2025 10:21:10 +0000
asID:                     577
IP address blocks:        2001:4958:1828::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:71:42:1e:10:ce:b1:4c:ee:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:10 2025 GMT
            Not After : Jun  7 10:21:10 2025 GMT
        Subject: CN=71a2ebaf-e97c-461a-89c7-ec519f69f3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:95:6e:18:18:92:30:eb:1c:e7:83:81:2e:
                    5d:d0:99:e0:91:a0:1b:84:05:c6:39:fd:e7:45:70:
                    f7:95:d4:69:28:84:99:e6:b9:ff:88:73:69:75:89:
                    3c:d4:b7:99:e9:a2:0b:b9:97:63:8b:eb:9f:23:77:
                    c8:b8:50:dd:eb:e5:4e:cb:e6:06:c8:2f:da:20:16:
                    30:96:25:a8:d0:a0:f0:1f:5f:5b:cf:b9:0c:86:ac:
                    dc:11:c7:76:00:8a:99:64:3e:10:3f:85:7d:e5:5d:
                    22:89:ef:62:0e:c8:f7:50:89:ef:04:33:87:a6:6f:
                    61:6c:3d:de:1e:2b:12:ee:b9:76:dc:81:1f:df:ad:
                    c9:7a:dc:77:ce:fa:82:a7:c5:bd:ce:bf:7f:be:58:
                    ab:4d:23:ba:83:bf:ad:9c:a3:48:16:cb:7d:6b:22:
                    72:7e:da:42:9e:34:33:e4:ae:c8:14:0e:2f:39:17:
                    46:65:6a:77:f1:dc:79:e3:b3:78:f3:b7:ba:b6:dd:
                    e4:0d:f2:39:f3:ee:49:51:a1:33:0e:7e:e0:96:6e:
                    58:f7:cf:c2:5c:8f:12:db:12:c6:a0:f2:3e:27:40:
                    71:3d:09:70:b0:97:c4:39:46:1f:63:66:08:9d:4c:
                    95:7e:31:62:19:36:62:a9:2a:e8:7c:10:cc:4e:70:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AC:82:69:C6:32:20:A0:3E:E8:12:5E:F5:BC:EF:F5:96:6D:1E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/030ee170-33f1-34f8-b5a8-14ffcdf5c169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:1828::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:15:05:1e:11:0e:e6:02:4e:ea:84:a8:4e:5e:56:36:a7:
         2b:5d:68:0b:a6:e7:a7:6a:8a:0b:90:69:c5:9d:7e:8d:5c:be:
         02:bd:ea:47:98:e0:08:45:73:b5:d3:6d:39:b2:e7:c8:63:41:
         d9:ac:68:48:9f:a4:ee:f1:d9:d7:35:f8:38:e0:c1:b1:6a:58:
         f9:7a:19:4e:74:74:0b:bd:67:2a:f4:e9:b7:ce:de:85:82:26:
         0c:69:2f:14:b5:1c:89:83:49:a5:47:1e:40:66:ae:ea:20:e1:
         37:6a:92:cb:52:a6:d9:e1:4b:d0:68:50:33:bd:8e:e4:a0:a5:
         18:a8:2c:20:c7:63:91:92:9a:c2:93:14:ac:6d:e2:8b:b5:52:
         8a:ca:19:9b:40:c0:f5:19:47:c3:3b:5e:9a:0e:b2:de:ac:84:
         0e:d3:2a:78:2d:ca:36:6f:47:8a:36:30:c8:24:15:22:46:d0:
         59:eb:a9:6f:73:63:0b:50:88:85:e9:5c:fc:18:5c:51:71:d3:
         dc:cb:4b:f6:9e:5a:ef:05:ac:41:f2:e0:91:55:e0:e2:03:d1:
         d9:6a:56:c3:08:46:4f:fa:c1:9a:9f:b4:0b:50:21:c9:26:47:
         87:9b:8d:ea:5a:66:77:b2:f8:a5:69:a8:b1:87:cc:8c:dd:df:
         55:8d:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:45 2025 by rpki-client