Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6d8061a-faa0-3515-b1db-e532ab5d9798.roa
File:                     b6d8061a-faa0-3515-b1db-e532ab5d9798.roa (raw, json)
Hash identifier:          jzSwtdtYhvL99N/4UqaPBDO5pYYZdUXa7cB9w2z2Dww=
Subject key identifier:   9E:75:C9:45:5D:21:A2:ED:B9:F1:2A:C9:62:5E:3B:4E:F1:EC:6F:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F85EE9FA1CCF68753C9700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6d8061a-faa0-3515-b1db-e532ab5d9798.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        2601:193:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:5e:e9:fa:1c:cf:68:75:3c:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c8810cb5-c835-451b-ba97-559b7cfd1ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:f2:b5:67:6f:bc:7d:89:b6:9c:49:c7:c9:
                    14:a3:e6:70:6c:88:cf:24:8c:c7:1e:a5:08:0f:8a:
                    14:09:4b:96:83:d6:7e:c6:6d:7c:8e:e4:77:92:c0:
                    ad:eb:13:42:a9:be:de:5f:6e:41:d8:1b:40:a6:99:
                    eb:ef:7d:47:82:b3:72:37:5c:75:91:d1:3a:1b:8c:
                    e0:a4:8e:72:e6:02:d8:7a:d7:f8:3e:de:91:43:03:
                    f5:67:9b:dd:7f:3d:e8:3a:99:f3:ed:7b:67:5f:0d:
                    7e:aa:a4:6f:1e:ff:9e:09:53:44:b6:b8:cc:e3:8b:
                    43:ec:0c:10:2a:75:ef:e9:84:08:44:6e:f6:e2:cc:
                    50:3b:95:21:02:92:3a:d4:e3:58:24:63:2e:ef:fd:
                    af:74:b3:9d:0b:75:10:f0:66:29:e3:7e:ce:17:43:
                    57:92:01:2e:4b:27:b8:91:3e:21:ce:01:e3:3b:af:
                    e6:bc:c1:53:4f:92:cc:66:6d:f9:7a:7d:19:3c:fd:
                    f6:7a:87:3b:8c:70:3a:b4:e1:5b:e9:1e:af:aa:af:
                    f6:53:44:57:0c:f2:7c:6f:7c:51:d6:55:52:a4:ea:
                    96:10:86:50:99:77:02:e2:66:48:de:88:9b:f5:08:
                    c1:a2:e8:7d:46:f9:41:e1:c5:51:3a:3c:21:1d:d3:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:75:C9:45:5D:21:A2:ED:B9:F1:2A:C9:62:5E:3B:4E:F1:EC:6F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6d8061a-faa0-3515-b1db-e532ab5d9798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:193:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:cc:22:6d:0e:19:3b:16:c8:c8:c2:e2:1a:4c:db:42:69:
         32:3b:15:b7:f8:0d:67:d7:1a:69:9b:a8:08:31:3e:af:0d:28:
         d5:09:2c:4e:4d:2e:6e:bf:a7:e6:56:f6:19:9e:c9:0a:4b:58:
         09:b4:68:80:cf:f6:43:51:1d:47:58:5e:4e:e6:6a:70:11:20:
         8c:a4:9c:7b:73:6c:0a:ed:27:e1:c9:c4:c2:40:d9:a4:b4:3c:
         57:f4:4a:5c:87:bb:23:79:29:69:50:dc:16:b2:54:cb:9f:fe:
         c6:50:2b:92:da:08:3d:8c:97:88:41:b8:a1:a4:27:a7:4c:49:
         d8:fe:15:19:fd:d3:c5:40:bc:f9:9d:62:50:a6:17:8a:9b:1b:
         f1:07:f5:87:12:ef:4f:f1:5c:6a:e9:a7:2c:18:2b:df:da:76:
         9f:52:34:1f:94:36:c0:bc:29:02:b6:54:c3:85:8c:5c:68:5d:
         00:6c:c6:04:40:22:2b:24:fa:a9:8b:f6:01:8d:80:1c:2d:00:
         f1:6f:e6:2b:eb:26:e1:f4:9c:6e:f0:f2:9f:ea:77:3c:3e:c8:
         86:ab:70:bd:2e:6a:6c:4a:d4:2b:90:68:18:6d:13:b9:f9:c0:
         5f:bf:43:3d:be:0a:04:5d:73:9e:d0:47:40:14:a2:a6:41:58:
         f1:f9:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:15 2025 by rpki-client