Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa
File:                     11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa (raw, json)
Hash identifier:          Lp3npDjNpJv+aB5wHy8lg2+oe5R8D0fadgeB9ehMmNM=
Subject key identifier:   89:CC:CC:6C:00:B0:90:03:80:91:D4:7C:83:88:F5:EA:0A:9E:21:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BA581E214281C6B67E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        2606:4700:304e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:ba:58:1e:21:42:81:c6:b6:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=074e7057-697c-40ad-ad99-c50b495b3698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f2:84:49:da:16:d8:c5:1f:1f:81:16:fe:66:
                    5b:e0:f5:d3:51:83:b7:c6:57:07:3b:a0:45:aa:e2:
                    6a:f0:6b:81:01:fb:02:3e:1b:54:58:fc:3d:bd:a8:
                    7b:dc:d8:5e:b8:09:59:7c:ca:09:0a:11:f4:c9:c8:
                    d6:9f:33:bc:58:b7:fc:b0:d6:ce:da:7e:19:39:3e:
                    45:2d:3a:5c:f3:d5:c4:7b:48:ea:e0:f3:ec:de:53:
                    4a:41:f9:98:71:79:39:5c:c2:a9:da:d0:b7:44:0a:
                    95:10:8a:bc:78:6b:8e:15:8a:d2:2b:d9:6b:8a:39:
                    41:8e:c6:ad:ff:1f:44:5a:41:58:66:a6:d0:22:73:
                    aa:9e:40:1e:a1:f0:67:c5:53:38:ff:6e:f2:dc:a4:
                    af:ac:93:b5:74:1b:1e:81:8a:4c:72:d3:2b:6a:cf:
                    37:d0:7f:30:18:9f:60:ab:7a:ea:d0:bb:0e:8f:45:
                    e0:65:f8:f1:12:89:36:2c:20:f4:80:16:7d:8e:51:
                    1c:cd:87:5c:c5:fd:a8:fa:fc:e9:38:b0:3c:57:f6:
                    39:87:0c:98:00:5f:f5:20:d5:61:af:cb:9c:5f:07:
                    de:14:15:d9:ed:08:76:0d:0f:8f:01:09:f9:2a:24:
                    0c:90:a4:d5:7a:0e:3c:29:82:e1:0d:16:41:4f:2f:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CC:CC:6C:00:B0:90:03:80:91:D4:7C:83:88:F5:EA:0A:9E:21:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/11adf43d-f5d6-3ede-956b-7561e88dfc9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:304e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3d:6d:f1:58:a2:20:5b:b8:31:c1:86:ec:90:7f:3d:ea:51:
         1f:72:4e:4e:15:59:c7:ea:7e:93:c0:18:f0:5e:da:11:01:28:
         f3:88:05:93:cc:01:47:73:62:64:0b:10:f8:1b:da:32:77:1e:
         f8:22:95:5c:18:e8:30:1f:92:52:aa:2d:cf:24:86:0f:6e:d5:
         db:25:fa:c2:b6:23:ab:c4:df:75:94:e0:67:dd:2a:ec:31:95:
         c7:b1:c8:f1:2d:6b:69:8d:cc:a6:17:b1:2b:2e:42:e1:d7:1b:
         20:01:0c:23:3a:25:41:60:c3:31:be:a5:12:c1:8a:04:81:b7:
         1d:94:23:bd:c8:5e:dc:94:a9:ca:9c:40:5d:5a:45:61:76:27:
         86:c2:48:7e:67:1a:09:2d:0c:8a:11:02:6b:c8:d0:83:58:30:
         84:98:5f:73:8c:ff:0f:13:c0:a9:18:d4:02:fc:5c:fd:57:39:
         50:cb:5e:ad:15:af:37:51:11:82:bc:74:f9:30:a5:32:83:13:
         c8:09:40:ab:b8:05:1b:d6:91:d8:f7:16:05:3f:dc:c3:61:57:
         38:40:29:55:8a:8f:4f:3d:b6:b4:d4:d7:6e:3a:7c:9b:ad:ac:
         5e:d4:33:74:ad:91:f2:20:b3:fc:3b:73:dc:2d:25:c2:74:6d:
         77:6b:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:04 2025 by rpki-client