Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
File:                     d391bb51-4a6a-32a2-9219-49391be11d04.roa (raw, json)
Hash identifier:          o3emJ5y6R3YqIHzKyhp8gA1twSORgO1J71rADdgYTeU=
Subject key identifier:   63:E6:26:D8:7E:7D:C5:B5:72:35:38:BD:D4:49:FF:14:B9:47:C0:A7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858491D71850B34CAC3BFD832AD00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        2001:418:1401:18::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:85:0b:34:ca:c3:bf:d8:32:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=5a0b1014-9cc1-4c65-9d9b-20463a8669ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:cb:5f:29:68:83:e2:d9:e1:17:bc:d6:b7:
                    02:a6:82:48:e2:91:da:10:a2:84:c5:e6:17:d4:c9:
                    21:39:5c:83:7d:9f:cc:81:e0:01:54:fd:28:f6:6d:
                    ae:c1:3b:f8:5f:a7:7d:93:07:3a:02:b5:27:df:16:
                    62:3c:03:9d:81:1e:3f:f1:77:6b:03:98:bb:a5:4c:
                    00:24:9f:4c:e9:73:74:8b:b3:4b:0a:8f:97:ec:ae:
                    21:83:6a:a7:43:68:0e:d3:3c:b8:2f:f5:09:1e:11:
                    82:57:44:1a:34:b9:e4:80:e8:1e:48:03:d6:b5:13:
                    66:3e:43:4f:03:48:91:f4:a5:4a:35:1b:dc:ad:17:
                    08:9d:84:16:ce:ca:a1:a4:47:42:1b:93:72:c5:77:
                    e6:3a:41:7a:68:58:bb:4b:de:5a:0d:ad:15:84:69:
                    58:81:70:30:21:b4:5b:b4:6e:f2:5b:2b:93:4a:c6:
                    7e:9b:b2:20:9c:9b:c6:72:56:a3:72:dd:0c:96:f6:
                    6c:bf:fb:63:79:6c:87:10:59:4a:1e:cf:76:00:23:
                    e3:14:37:02:b8:d4:0d:33:83:fc:f6:b8:a9:39:6a:
                    21:52:08:37:9a:73:58:f7:d5:43:1b:57:38:8d:79:
                    19:7e:30:e2:0f:4d:a3:9b:1c:3a:16:d6:37:a6:d3:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E6:26:D8:7E:7D:C5:B5:72:35:38:BD:D4:49:FF:14:B9:47:C0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d391bb51-4a6a-32a2-9219-49391be11d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1401:18::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e5:c2:f6:da:a9:96:e8:26:2e:09:45:7b:ce:79:2c:3e:75:
         b8:e5:ab:00:51:f8:53:ed:6d:90:b9:e8:d0:05:48:55:fe:ef:
         55:89:e9:19:2b:b0:bf:f6:24:7f:80:ca:87:39:55:5d:0b:f5:
         5f:02:4a:04:3f:27:e1:80:b4:bb:e6:21:c3:c1:bf:20:5f:7a:
         46:61:cf:b0:2b:b7:c3:d9:47:25:01:bb:f4:dc:8c:de:5d:51:
         9c:68:b7:f8:e4:74:2a:4a:0e:0f:2c:db:87:a7:b8:0a:89:24:
         ac:0c:e6:e8:7c:dd:c7:f2:30:3f:b2:60:0d:09:ae:10:4e:a8:
         ee:63:53:8c:03:50:21:22:ff:7c:bf:e6:40:4a:5c:88:b1:26:
         7f:b0:47:c9:bd:79:9a:98:ec:6c:9b:8c:d3:a7:10:ab:5d:7b:
         3a:b8:28:98:d7:5f:c7:ae:5d:1a:24:d9:e9:17:84:b3:3b:f9:
         e3:0e:bd:60:fa:7f:70:82:41:8c:01:2d:78:c0:a7:d3:a9:94:
         eb:ce:25:c5:22:34:9d:6e:3b:9c:13:00:ad:b5:a5:ba:c1:0b:
         86:28:38:ce:d7:39:6d:b2:81:8c:a6:73:73:95:6c:99:e3:f3:
         c7:74:58:04:6d:a9:2c:bd:dc:05:5b:97:83:bb:bd:c7:d7:9b:
         e9:af:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:11 2025 by rpki-client