Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e03f7de-5f22-3ad6-bbcf-b59006631ce3.roa
File:                     0e03f7de-5f22-3ad6-bbcf-b59006631ce3.roa (raw, json)
Hash identifier:          iKp6RnxHnE0U2COAJr0prF9+HHrF87Y+mBhjpuxtEYA=
Subject key identifier:   5F:AE:CD:36:34:B6:FC:B8:31:DA:4E:7E:2B:A4:F6:64:0C:AF:10:16
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C93C2BA349D4D18933370
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e03f7de-5f22-3ad6-bbcf-b59006631ce3.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        2603:3025:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:93:c2:ba:34:9d:4d:18:93:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=412dc415-d4bf-4ef2-b723-db04ecac27d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:15:87:70:82:24:53:06:b8:7f:ea:00:23:
                    ef:34:42:8e:30:3e:a9:a6:84:8b:38:75:2b:9e:ec:
                    19:9d:a1:ca:89:16:22:02:16:e6:51:13:10:b2:96:
                    54:67:bd:60:58:65:0e:75:4c:3c:b1:66:de:bd:e7:
                    e2:97:5a:01:57:c0:a1:dd:ac:01:5e:01:1a:ba:99:
                    0b:6d:4e:ee:fa:79:71:b4:09:0c:1d:5b:bf:2e:f1:
                    d1:f6:96:3f:c0:9e:55:bf:bf:f6:b4:67:ed:b5:36:
                    74:9d:6d:1e:eb:f9:be:32:b2:b2:35:3d:b7:d3:a4:
                    f0:04:b2:df:d2:d9:a1:09:9f:d3:06:38:a8:ef:ac:
                    fc:c8:e8:41:e2:6f:b4:30:a1:2c:b8:bc:ed:ec:27:
                    c0:72:08:30:f5:5d:72:3d:b1:3f:29:54:2a:a6:f0:
                    d8:fd:06:91:ff:c3:e5:af:fe:d5:db:d0:2f:ae:9c:
                    30:12:9c:0f:2f:12:02:81:4a:ec:8e:69:c9:d8:45:
                    e0:47:ec:68:a6:5f:d7:f9:1c:3a:f4:60:f6:54:52:
                    71:e5:ac:f3:99:77:83:05:b6:35:eb:6d:70:e5:b0:
                    51:a5:5b:ea:9c:8f:c7:1c:95:bb:44:b1:c3:ef:1a:
                    f2:cd:d7:e4:c7:c8:96:ee:1a:0d:03:6a:90:62:20:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AE:CD:36:34:B6:FC:B8:31:DA:4E:7E:2B:A4:F6:64:0C:AF:10:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e03f7de-5f22-3ad6-bbcf-b59006631ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3025:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:62:0f:51:fe:ab:47:5c:c5:07:c6:d9:c8:27:ad:74:a7:53:
         49:e3:67:38:ff:bd:d0:e9:8e:fd:54:be:40:eb:7c:ab:8f:fe:
         1c:c0:08:42:cf:6f:99:6d:5b:5d:73:53:2f:6b:13:13:b7:2c:
         c6:58:62:6d:c0:a7:04:02:6d:5a:51:7a:43:3f:e1:da:85:e6:
         f5:b5:17:9c:63:86:0b:f1:8f:bc:fd:75:e0:eb:71:01:a4:65:
         c2:8a:bd:73:a5:ce:af:37:dc:e3:4a:29:84:dd:0f:7e:cf:0a:
         1d:4d:67:e1:55:9f:bf:d4:2f:26:f0:d9:46:66:cc:1a:7e:e1:
         25:01:97:99:af:71:e1:93:91:48:52:51:ac:81:3c:fe:bc:21:
         86:d6:99:92:59:64:36:47:b5:b6:f1:cf:63:ab:a0:0d:a9:95:
         df:bf:6a:0c:ae:7f:00:71:c4:10:ea:98:8c:4f:a4:b2:b3:81:
         31:a1:d9:e4:2a:9f:69:67:9e:cd:8b:46:e2:e0:40:39:42:84:
         bd:1e:46:81:19:8e:58:49:be:39:7f:67:80:85:0d:88:97:bd:
         df:38:50:3b:9d:5d:93:42:1b:cf:9e:87:69:0a:96:e5:4f:fa:
         fa:45:99:e0:81:c8:ad:8d:5b:bf:c7:60:ca:9b:e2:44:52:72:
         ba:eb:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:01 2025 by rpki-client