Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa
File:                     a3f11860-68fa-3387-b9fd-715d801b2410.roa (raw, json)
Hash identifier:          rCt78J6BvMwunKNJMH9z8ilQtArDtvSmtsMLoZbS4sY=
Subject key identifier:   1C:25:26:60:A7:17:36:E5:2F:AD:2C:AF:76:61:51:3D:4C:F8:2C:52
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584908815E89C7B14CEB1C82C048
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     399728
IP address blocks:        2620:98:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5e:89:c7:b1:4c:eb:1c:82:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=bb7f6fa4-f633-4163-bf72-b1c12a3ef701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:99:8a:37:f8:b1:a8:27:72:bd:f6:bd:01:
                    4e:8c:c1:74:4a:7c:5a:01:a4:cf:56:68:66:51:f9:
                    d3:10:42:e6:34:fe:00:4c:b0:82:b1:fc:7e:d0:61:
                    bf:37:f0:f8:f3:79:c4:18:01:4c:e1:52:47:84:98:
                    c2:82:3b:25:1c:9b:ba:7b:99:b2:7c:c6:44:06:8d:
                    38:69:02:ec:80:34:23:fe:ad:36:ab:49:9d:e1:12:
                    b6:4e:d8:af:df:44:ae:d2:ab:47:fe:1a:db:08:6e:
                    42:50:37:86:98:f2:eb:86:c7:be:9c:23:1a:13:a3:
                    b9:51:90:10:6d:f7:83:a5:ab:86:33:9f:de:11:27:
                    e4:2b:77:5c:41:a9:aa:07:eb:47:6e:cd:bb:b2:a8:
                    8a:c9:67:c0:64:ca:73:03:32:a2:1b:a0:d3:48:b0:
                    35:33:60:0b:1f:5b:66:a2:18:b7:b3:81:a1:68:4a:
                    87:6e:c6:ba:2f:04:5f:4b:8e:6e:d5:7b:c4:72:d3:
                    cd:d9:8e:26:43:7f:4d:3e:a4:34:73:e1:a9:7f:2e:
                    d8:28:d6:f5:94:4e:64:48:65:51:7a:57:09:0e:e7:
                    cd:2e:5d:bc:aa:58:9a:92:f5:e8:bf:b0:be:28:87:
                    7c:e0:4b:2a:19:5f:cb:38:7b:2f:e6:b5:65:6e:a7:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:26:60:A7:17:36:E5:2F:AD:2C:AF:76:61:51:3D:4C:F8:2C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:87:0b:a8:b9:bb:4a:38:1d:b9:9e:7a:26:42:04:2f:8c:
         f0:6d:67:d3:c6:1b:5c:36:04:99:fc:f2:3e:4d:36:d4:92:91:
         83:67:6d:c3:98:cf:c1:54:b3:06:b5:79:56:2a:af:6f:e0:b6:
         27:23:e0:cd:88:6d:49:4f:a8:e4:35:a3:ca:fe:82:4e:e4:1e:
         71:45:ff:82:d4:3e:68:cf:da:d3:02:b0:fa:ff:ea:4a:a0:66:
         62:f9:09:20:54:7f:87:42:4b:19:96:81:ca:08:51:b1:6d:b6:
         40:c2:f1:f0:ba:74:14:44:bd:0f:51:80:52:06:74:43:43:6f:
         e5:af:f8:81:a8:d8:53:d3:21:96:d0:6d:50:b4:eb:62:30:61:
         93:df:c6:0c:22:8c:0e:7a:ca:39:48:be:4b:fe:c9:43:48:be:
         f9:83:2b:0b:6c:87:ab:6f:73:2a:40:29:3e:5f:9c:17:8c:5f:
         88:00:80:1c:24:81:57:01:e9:3e:23:0f:84:9f:0b:c4:db:f6:
         43:85:ff:56:89:aa:e9:91:d3:5f:00:ed:64:95:ae:f7:7d:d1:
         6f:1f:4b:59:e9:d9:bc:8a:7e:82:e2:a8:f9:25:5c:06:6f:47:
         b7:3f:b0:36:d9:73:6b:38:80:cc:37:92:45:4f:c5:bc:08:07:
         9c:9e:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:35 2025 by rpki-client