Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
File:                     2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa (raw, json)
Hash identifier:          RLak+kkIb4TI42X10kwvD9kC3JMW+DfEMS+ABxeHzVY=
Subject key identifier:   71:92:D2:C5:72:2B:26:4C:A0:2B:68:2A:F0:6C:07:B7:CB:F5:1B:E2
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F43285848F926AE0337F1C8830E9A57A0
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14773
IP address blocks:        2620:1d5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ae:03:37:f1:c8:83:0e:9a:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=facab868-6f76-4bf9-9d9b-7401bffe55b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:fd:59:44:c7:c2:18:b1:bd:53:97:3a:fd:
                    cd:ef:28:69:2e:7d:0d:c9:13:94:97:c0:6d:ee:98:
                    af:04:66:a8:fa:38:44:de:26:b4:fe:b2:9e:a8:b9:
                    6d:6c:21:6a:98:ac:e0:c5:37:15:28:80:9a:f8:c1:
                    1c:09:db:6a:cc:21:cd:92:0c:eb:18:bb:40:de:7e:
                    9c:38:4e:15:cb:e9:ca:e1:16:e2:29:2f:4c:39:3b:
                    14:bf:a3:52:ab:13:01:fc:90:13:e7:a0:c6:ec:74:
                    1f:2a:14:9a:df:ee:f6:c4:65:ce:3a:a3:93:f5:7d:
                    aa:ec:f1:97:50:aa:bb:60:92:8c:7d:58:22:bd:06:
                    b5:bb:8e:74:11:e9:b3:38:ab:5b:29:87:de:56:77:
                    83:eb:cb:2e:04:dd:5a:4e:40:87:33:84:37:07:b7:
                    f6:84:92:93:62:29:22:41:75:1d:11:47:1e:2c:7d:
                    69:85:a9:e7:eb:b7:d5:99:b4:00:0e:bc:9d:bb:59:
                    15:2a:f1:75:70:e1:9e:39:cb:21:95:de:48:a2:5f:
                    fc:7b:70:f6:4e:bb:e7:60:07:a2:25:96:ef:3c:3f:
                    ae:9d:8f:0e:22:ed:5d:ea:b5:0e:18:f8:6d:8a:8b:
                    da:3e:8e:1b:85:cd:e9:73:5d:9d:00:03:97:ca:32:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:D2:C5:72:2B:26:4C:A0:2B:68:2A:F0:6C:07:B7:CB:F5:1B:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/2f7b05e6-3713-3454-b0fe-a2b1a7a25654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:d2:70:d4:f0:8e:7d:8b:7e:db:9a:68:0e:3f:5c:46:6b:
         0d:b7:ae:d3:81:1d:bb:e8:62:4d:2f:97:0f:f3:e9:48:9f:cb:
         83:4c:0f:a1:1a:d5:02:52:c0:67:48:26:a0:56:4c:a9:b6:30:
         20:27:f1:4c:e8:6d:13:5a:e5:c0:63:a1:29:f6:4a:e7:4b:10:
         d7:20:4f:e3:4c:b2:42:78:cd:9b:b2:46:8a:34:26:b8:b3:9a:
         d7:66:f1:f8:86:15:37:fa:08:7e:2a:02:b3:c6:fc:87:39:61:
         b9:76:bc:e5:0d:9d:92:36:f9:e2:40:c5:a1:14:0e:81:32:e0:
         de:db:c5:21:28:2e:76:0f:c8:c9:09:14:b4:0f:f4:1d:5e:2a:
         bb:61:24:a4:37:5a:a6:60:0e:b9:50:01:ed:fc:bd:ae:22:25:
         62:c5:a3:c4:a9:90:c7:ef:68:9f:2f:04:d5:9f:34:f3:a8:1e:
         03:43:1c:7b:9c:2d:a0:53:1d:30:de:79:ca:86:0d:f6:00:ed:
         74:63:64:2d:95:e7:60:bf:42:39:26:bb:af:ef:c2:b3:93:c4:
         f2:53:fd:d8:ba:d4:dd:21:69:ce:26:ca:c4:80:56:cc:d2:d6:
         f8:4f:5f:92:ba:c2:ff:91:53:6b:5c:93:4e:22:6b:39:82:02:
         14:9f:98:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:17 2025 by rpki-client