Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad1997e-f178-3713-b5b3-3f28255e7fdf.roa
File:                     cad1997e-f178-3713-b5b3-3f28255e7fdf.roa (raw, json)
Hash identifier:          7Kew9rYlNyfF8CWfO0ejP4vpwpBLoUrbNKsUdDc280U=
Subject key identifier:   C2:42:F5:E2:42:39:EA:50:4A:29:9B:C3:75:0F:E5:80:65:00:34:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAEF8527DDCCD40B840F288
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad1997e-f178-3713-b5b3-3f28255e7fdf.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33659
IP address blocks:        2603:2089:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:f8:52:7d:dc:cd:40:b8:40:f2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=df110ea1-a8a0-481b-bd99-b2926aaceda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:24:af:7b:9f:c8:da:90:d7:3c:55:e1:3a:
                    6b:c9:aa:2c:23:21:34:a9:68:87:10:fb:07:c4:e6:
                    7c:30:8d:0e:a9:f3:85:67:6a:10:db:9d:4b:f7:69:
                    1e:21:35:17:95:5c:18:38:2c:61:0f:bc:cd:a7:a8:
                    6e:fa:03:c7:ff:8b:47:a4:c0:a7:02:04:75:b9:0b:
                    ff:01:b9:d1:9c:14:30:f2:14:d3:a8:de:ae:dc:3f:
                    35:12:4d:58:07:88:15:8d:98:0b:37:14:5e:5b:46:
                    0d:de:49:57:6c:88:83:e3:4c:39:4d:94:2b:d3:6d:
                    f1:6e:69:d7:ee:f5:ba:59:97:f6:24:06:64:95:d0:
                    e9:43:7c:b6:2c:0d:33:40:85:39:66:1f:f4:70:e2:
                    67:36:96:a6:86:3b:01:d2:0c:94:4d:05:75:6c:ce:
                    27:26:fb:03:70:48:00:5b:5c:42:f9:5a:34:1e:dd:
                    a0:03:38:b4:2c:c9:4a:39:74:bd:91:14:7d:f7:aa:
                    bf:51:d7:56:3b:a1:2c:b2:cf:60:12:8d:5f:5f:f9:
                    62:f2:02:e1:28:26:96:17:2d:d0:78:75:45:c4:01:
                    6c:6b:3e:19:41:67:60:9b:5c:b8:41:14:ba:e5:ff:
                    f3:e1:fe:71:44:6b:1d:c5:04:70:0b:78:2a:fd:9e:
                    1a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:42:F5:E2:42:39:EA:50:4A:29:9B:C3:75:0F:E5:80:65:00:34:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cad1997e-f178-3713-b5b3-3f28255e7fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2089:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a0:c1:6e:b9:47:77:61:9e:f8:51:6d:a4:b8:3e:f9:7b:b1:
         ea:39:a6:fb:81:58:fa:94:74:7c:1d:6c:e9:29:e4:55:39:79:
         56:33:d2:aa:d6:51:5c:e5:1c:e7:ee:c9:96:82:5d:df:ae:aa:
         da:af:a9:1e:aa:af:cf:62:f3:e2:0e:88:59:16:55:e6:e3:48:
         6c:92:eb:19:c6:96:ad:f2:f8:c9:e4:3a:ee:a6:70:ca:9c:69:
         ae:72:bb:b4:57:d4:8e:b4:17:fc:8a:8d:41:08:65:5d:34:b7:
         64:79:25:2a:02:85:8a:8c:db:85:a0:a8:39:25:16:bd:3e:d1:
         66:6d:47:91:f6:9e:08:4d:3b:e5:80:b4:b3:25:e6:38:f3:90:
         c4:d8:91:fe:17:55:07:bd:a9:4c:b8:52:e6:80:d4:b0:15:22:
         ee:18:9c:3f:b0:d0:f3:d5:6f:21:e1:48:21:f7:20:d4:ad:58:
         0f:c1:69:27:74:d3:7c:3a:e2:e4:92:21:9d:a8:91:3f:52:57:
         44:ca:e9:91:06:8e:14:75:de:de:58:f6:84:06:23:72:3a:02:
         10:4a:4d:eb:03:3d:ee:23:a9:7c:5c:73:37:7c:53:c2:8b:bc:
         1a:44:33:95:62:c4:fd:0f:4e:0c:fe:00:a7:24:b6:6b:e7:f0:
         99:64:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:32:17 2025 by rpki-client