Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa
File:                     e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa (raw, json)
Hash identifier:          R+WoFJFbhevV2Bc5fLPuh1BEKcQlhD1TunFkg21CuO8=
Subject key identifier:   1B:01:AE:43:20:21:EC:48:80:99:D3:B6:AF:D4:F8:60:1B:CE:02:F0
Certificate issuer:       /CN=3034d07c-3a5c-48d3-8756-810837f1ae39
Certificate serial:       010D0C9F432858492CAE9083A05ED598CE674100
Authority key identifier: CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     395378
IP address blocks:        2605:b80::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:90:83:a0:5e:d5:98:ce:67:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3034d07c-3a5c-48d3-8756-810837f1ae39
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2b017845-86f5-4d9f-8ed5-78cf59d1d2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:e5:10:c5:ba:8e:92:af:53:93:0c:4e:76:
                    64:06:62:ed:f2:39:df:3a:01:3f:99:8f:12:1a:8c:
                    77:ab:76:6f:b1:37:4d:fa:3b:2c:59:cd:7c:40:ae:
                    15:5d:89:e6:d3:bb:45:58:ed:9e:57:e0:f0:72:87:
                    91:40:0f:d6:a3:69:65:28:27:15:9c:ab:63:7a:e9:
                    d6:58:2f:5f:51:0c:6a:f3:a8:ac:7b:dd:7a:b0:bc:
                    b7:71:3b:b7:4e:a2:17:20:b6:af:18:5d:cb:41:10:
                    9c:32:b6:ff:9b:b5:84:58:3b:46:bb:32:b2:5a:c2:
                    05:aa:6e:66:d5:83:a7:dd:b6:2e:15:20:88:b0:4c:
                    40:e9:10:1f:9e:85:74:92:a5:0a:7f:74:51:eb:06:
                    17:82:b8:97:b2:4c:65:88:f3:aa:6f:95:2e:4c:76:
                    61:e5:75:8e:7c:d2:6d:42:3c:19:eb:9f:ba:04:76:
                    db:91:5d:14:5f:7a:61:64:82:d0:2c:9d:be:63:0c:
                    05:5c:2b:f8:28:ce:01:f9:e6:1e:fc:45:7f:ba:0a:
                    a5:eb:bf:dc:98:7a:e8:26:70:d6:ff:d8:64:81:48:
                    3c:4a:4a:70:65:43:f2:6d:d2:8c:37:aa:b9:a3:9f:
                    2a:a3:0c:92:ee:bc:af:a5:68:8e:db:05:b7:10:9a:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:AE:43:20:21:EC:48:80:99:D3:B6:AF:D4:F8:60:1B:CE:02:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/e59a494f-b10e-3d3b-a4aa-eb5a78e82379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39/3034d07c-3a5c-48d3-8756-810837f1ae39.crl

            X509v3 Authority Key Identifier:
                keyid:CE:B3:31:18:28:F3:99:AE:1F:EF:C2:E7:9A:A4:4B:28:BA:CB:36:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3034d07c-3a5c-48d3-8756-810837f1ae39.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b80::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:38:1b:00:ac:f9:2e:0f:63:84:ea:7e:a7:6a:6f:ae:91:d6:
         9a:f6:62:d5:24:f9:ff:90:38:ca:da:23:e0:53:13:ec:52:d0:
         50:0f:61:5b:52:4f:45:89:d6:ef:ba:01:0f:59:e3:25:61:fe:
         15:49:be:06:45:b8:c8:e1:d0:89:42:c7:05:c8:89:7d:09:74:
         dc:f7:42:9d:e1:f7:43:40:f9:ec:75:c2:4a:82:2b:b7:dc:8e:
         26:2e:9a:ac:dc:d2:9f:84:67:4a:d4:a7:75:49:21:9a:fd:95:
         4a:f3:d5:da:61:b0:4d:38:f4:d3:84:a9:6c:59:03:7c:4e:e8:
         fe:40:0f:90:5f:a1:88:d3:ba:07:a3:9f:7e:a8:53:14:e7:8c:
         ee:55:91:db:d2:d5:da:2d:5a:b2:a4:6a:44:37:cf:b9:f7:30:
         d4:63:f4:b3:05:17:48:d4:dd:26:1e:89:8b:eb:07:b4:14:c4:
         eb:79:21:ca:4b:75:6b:c3:c6:15:09:6f:5a:0e:c6:4e:f1:a0:
         f6:28:c6:1e:55:1d:1b:92:58:f0:46:7e:df:10:b2:9a:23:8b:
         78:03:62:b9:c3:3a:c0:91:18:bd:30:35:fb:d1:af:1a:68:60:
         3a:28:ee:06:33:00:6f:56:2e:17:2a:db:72:a3:d4:69:9c:bb:
         c2:8c:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:01 2025 by rpki-client