Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa
File:                     d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa (raw, json)
Hash identifier:          KeSJavjuyBx3053XHiUqI0SVFqbiF5VWUdclyg/n8UE=
Subject key identifier:   65:D3:1F:1E:4F:BE:37:A4:62:20:E8:12:94:2D:90:47:00:54:AE:40
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F43285848F65BDAC0CC22B710D34ED700
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     394497
IP address blocks:        2606:8e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:da:c0:cc:22:b7:10:d3:4e:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=7613c621-a2be-4b3e-862c-2ae14a3314d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:4c:47:0a:a6:0c:92:0e:f1:00:78:9f:b3:
                    38:c8:26:68:87:76:4f:ef:3d:dd:d2:a6:01:aa:cf:
                    d6:3f:4e:05:a7:b2:5b:ad:eb:13:72:eb:1b:a3:63:
                    ab:50:f4:4d:34:c6:8e:6c:77:06:6b:9f:4f:5d:a9:
                    c1:f8:0c:8e:96:d7:73:33:26:48:47:65:2d:55:d5:
                    0d:e3:1a:e4:70:f4:97:69:46:e2:d0:1d:d0:8d:ad:
                    68:5e:db:87:00:6f:15:41:0e:8e:70:8a:99:ad:d6:
                    eb:7c:e4:d1:bb:ea:ff:ea:93:56:ca:06:c8:d8:d2:
                    74:d5:c6:df:35:ac:d7:6c:2a:a2:b0:4b:a6:01:b3:
                    1b:3b:dc:6c:99:d6:7c:12:b4:be:17:a4:cd:de:3c:
                    db:94:29:f7:37:76:5e:70:b1:5c:fc:0f:61:61:ef:
                    71:44:0a:3c:21:8d:2d:a4:9f:29:b1:68:c7:b8:12:
                    27:ed:60:a1:a6:be:1c:99:24:26:53:01:c4:df:d0:
                    85:68:45:b0:f2:3f:a5:64:e4:86:d8:03:f9:9e:48:
                    32:90:4b:00:dc:ef:44:97:1e:b6:29:a6:1b:a2:7a:
                    dd:7a:23:b7:0b:bf:66:d2:1f:26:57:01:c5:fc:99:
                    b4:9a:43:03:bf:03:75:0b:05:d4:ba:41:dc:e0:80:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D3:1F:1E:4F:BE:37:A4:62:20:E8:12:94:2D:90:47:00:54:AE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/d2c47e2c-1642-3ed9-ba5e-3f10406b08ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:aa:c1:0e:bf:52:b3:8d:9a:06:14:e5:88:a1:5e:84:de:d7:
         ec:02:26:fa:c1:f3:c4:2b:36:60:55:7b:b4:49:81:d0:77:75:
         3c:b7:95:31:50:bc:05:8d:1c:83:ad:36:67:f3:f5:ff:50:ea:
         71:4b:e6:01:0c:7b:f7:8d:a2:8a:f2:95:20:bf:9b:dd:da:af:
         21:c2:3e:67:3c:d2:ef:ee:c6:bd:9f:c8:77:e9:0b:bf:64:69:
         18:14:65:ca:f8:ba:e3:9f:4e:a0:78:d1:03:c7:1a:d0:b1:46:
         5c:39:47:a5:68:f0:4a:e3:a9:d6:db:97:ce:33:70:04:73:0e:
         32:bd:d2:8e:50:8d:48:e6:b6:0e:4a:cf:2e:90:47:e1:0d:c4:
         c2:c6:20:d1:28:3d:61:7e:db:15:70:a2:05:5e:de:9e:63:61:
         a8:37:4a:43:08:49:16:ac:45:99:33:64:e7:ee:c5:50:78:17:
         77:ca:47:14:8b:6d:6b:cd:dd:73:08:5e:fe:1a:02:6b:73:18:
         76:27:b8:37:63:2d:2d:04:e3:1b:49:d6:cd:60:e7:6c:e6:60:
         66:a3:c6:cc:28:cd:bd:a9:59:4b:97:46:60:23:ac:8d:3b:dd:
         be:7e:ed:a3:3a:a9:ac:b3:85:58:3b:21:db:73:d0:28:86:e3:
         14:f0:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:04 2025 by rpki-client