Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
File:                     fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa (raw, json)
Hash identifier:          c0kWes5EGfBdlNvf5MA7D8wV7pvZQfoBE6UsF/nGlQ4=
Subject key identifier:   0A:09:6C:35:43:D7:B5:1D:7A:81:FD:01:E4:21:DC:0C:51:E0:52:50
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F43285848A3F66D5E2D9E60D5C7456EE0
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa
Signing time:             Thu 23 Jan 2025 13:40:10 +0000
ROA not before:           Thu 23 Jan 2025 13:40:10 +0000
ROA not after:            Wed 23 Apr 2025 12:40:10 +0000
asID:                     398891
IP address blocks:        2602:807:e000::/48 maxlen: 48
                          2602:807:e001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f6:6d:5e:2d:9e:60:d5:c7:45:6e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Jan 23 13:40:10 2025 GMT
            Not After : Apr 23 12:40:10 2025 GMT
        Subject: CN=7be7b813-67e7-475e-9656-7a28fb3a0822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:de:69:4d:64:4d:ff:df:45:ed:1c:12:23:
                    0a:ce:24:ef:75:5c:ac:48:4d:04:72:f6:25:04:54:
                    af:37:cf:f2:a4:c2:93:92:4b:ff:4e:5a:73:4b:ad:
                    5f:18:3f:28:66:00:99:39:02:6f:37:40:a4:06:0b:
                    de:26:7a:ff:f9:de:da:2f:bf:52:14:cd:53:7c:16:
                    5b:1b:0d:52:83:47:92:0a:b7:af:09:c1:cb:e1:a1:
                    83:78:03:2a:96:8f:a6:35:2e:94:b3:60:6f:f9:e3:
                    66:85:17:a0:aa:5e:60:da:07:b2:71:40:ff:a8:ca:
                    fd:46:ad:05:15:da:9c:7e:03:a5:a6:2f:88:8b:06:
                    b9:be:a3:42:e6:68:a7:35:58:53:0f:5a:3f:4e:f3:
                    46:f5:4d:38:09:b7:17:0a:20:c8:08:78:b4:dd:32:
                    e7:19:5b:93:4a:e5:3e:de:73:d6:4a:23:0a:d9:58:
                    19:c6:c5:ae:7a:09:27:0f:b4:88:4d:6c:8e:b8:20:
                    63:bf:30:0a:e9:16:c1:2a:ce:bc:d8:8f:61:74:69:
                    cf:22:48:e8:23:e2:b6:10:cf:94:e8:c6:8f:8a:19:
                    02:0f:00:2e:96:75:19:3f:5e:21:ce:bf:ac:34:d3:
                    54:38:3a:b2:49:ec:31:06:9d:54:fb:c8:f0:5e:34:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:09:6C:35:43:D7:B5:1D:7A:81:FD:01:E4:21:DC:0C:51:E0:52:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/fd6bc7d1-16af-3db9-a980-3dd53700ac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:e000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:96:40:98:a9:db:e9:20:9c:93:39:b6:a5:a3:7e:26:01:
         ea:c8:fa:ab:85:5e:2d:1d:95:73:ab:3f:a3:2d:41:f1:af:00:
         13:be:f9:a5:15:55:b6:c8:da:07:58:0b:6c:dd:d7:93:1c:0c:
         d9:ca:9f:bd:28:d6:0e:5e:27:85:f4:a5:95:c8:25:8c:7d:cd:
         34:4f:a7:da:67:92:b9:95:f5:0d:25:b7:de:c3:ed:39:d4:d3:
         04:1c:21:b3:20:30:a1:9b:ed:a8:a2:71:df:dc:fc:dc:b7:3d:
         a8:a8:a0:ce:59:34:7c:c0:40:10:1d:2c:6d:70:29:0a:00:34:
         a8:a6:78:e1:c0:0c:be:55:f2:2f:f9:1d:ec:11:5a:4f:91:a4:
         c3:4d:8c:a7:5d:cd:81:06:23:1c:42:c1:fc:51:87:13:c5:4f:
         6a:fa:38:4d:88:8f:3a:08:a8:c9:c2:a4:33:3d:25:07:f3:ba:
         6c:9e:47:df:64:5f:99:69:58:d4:07:8b:09:85:d8:56:1d:a4:
         f0:81:3b:3f:d0:02:f9:e7:a2:e2:fc:ed:ae:9a:6a:f3:1e:67:
         66:98:87:fa:8c:87:f9:66:32:2c:fc:14:f5:fa:d5:00:3f:46:
         8f:ac:37:a8:42:46:c7:b0:c8:0c:03:32:e2:6d:a2:dd:bc:0b:
         54:1a:87:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:54 2025 by rpki-client