Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19e46e20-1104-3874-af61-7c88d0277340.roa
File:                     19e46e20-1104-3874-af61-7c88d0277340.roa (raw, json)
Hash identifier:          qRro1zcm8/XqANqIbTpf89fXiP43OYNXWIjoi6WqZq8=
Subject key identifier:   AF:4A:AC:A1:EE:DC:AF:AD:BB:43:90:4C:25:58:9E:44:3C:33:F2:54
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC1FAECA79DAB0AFAF1100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19e46e20-1104-3874-af61-7c88d0277340.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:4032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:1f:ae:ca:79:da:b0:af:af:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=0d05611e-727f-4cd1-b602-e03c1b1f40a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:38:10:3e:63:1b:e0:31:46:e2:31:9c:44:
                    e9:9c:00:42:a2:18:8b:2f:e2:c9:39:82:fc:40:c6:
                    a9:d2:65:46:74:69:d5:89:d8:1c:28:6e:5d:28:2b:
                    d1:b1:77:dc:54:c4:4d:79:34:37:7a:14:80:45:d8:
                    41:ad:57:a9:7d:a0:8f:e5:fe:17:a9:1e:5e:ed:23:
                    76:62:2b:81:65:74:e9:6b:d8:d8:08:a7:82:cd:da:
                    a6:85:c7:46:74:eb:9c:0e:6e:91:13:fd:55:90:8a:
                    91:8e:ce:7e:18:4d:95:cb:57:f1:79:c8:9a:a3:81:
                    db:86:04:b6:35:a0:91:d7:d0:9b:fa:25:ce:89:c8:
                    17:e9:eb:61:73:21:49:83:00:18:d9:dc:51:07:2f:
                    9e:bd:03:6c:2a:82:bc:d5:50:8c:c5:bc:30:13:56:
                    21:64:a4:36:f5:c7:9e:8f:74:2a:cc:00:7e:92:32:
                    d7:e8:9d:a5:fc:ae:e0:a4:3f:bd:75:7c:e2:a6:1d:
                    d4:79:85:52:8e:b9:88:37:31:05:ec:30:92:7c:e3:
                    03:b9:e2:12:c1:58:be:90:2c:d6:f8:8d:f3:ee:40:
                    0b:7a:88:78:da:ff:91:31:c9:df:ac:46:ea:47:59:
                    8f:89:30:59:0a:39:fc:a1:88:e9:48:48:cc:38:ad:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4A:AC:A1:EE:DC:AF:AD:BB:43:90:4C:25:58:9E:44:3C:33:F2:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19e46e20-1104-3874-af61-7c88d0277340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4032::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:45:3b:e1:fb:e7:59:57:99:22:c0:71:23:12:8b:75:38:4e:
         36:56:cf:98:80:fc:99:3e:6c:06:68:e6:da:c1:36:31:0e:ac:
         1e:cc:8f:23:a3:b6:2b:1f:89:22:62:f8:c9:79:3a:02:1a:8f:
         2a:26:c8:fb:dc:5d:6b:23:f4:a4:48:9a:24:fc:71:89:cc:d1:
         e5:cd:6f:cc:e1:92:14:dd:cf:a0:4b:61:7f:72:09:1e:96:2e:
         38:56:08:06:8b:bb:a1:7a:a5:2f:7c:40:9a:31:83:c5:eb:ed:
         72:83:50:85:e0:ed:34:3c:84:7b:34:1f:37:4d:59:48:29:a2:
         76:40:dc:42:97:55:1d:95:4f:a0:e2:78:d9:42:ea:bc:f6:14:
         e1:e7:7e:5f:67:5d:98:4f:5c:9d:67:5a:4b:d2:ce:9d:7b:51:
         58:bb:1b:d5:fc:c7:71:80:28:f4:44:5f:8f:f2:e4:a6:7c:ce:
         a2:22:2f:05:7d:21:e2:6a:69:45:1e:0a:71:b7:ee:69:13:ac:
         91:e9:a8:80:99:e7:8e:24:db:2d:95:dc:3b:94:eb:f2:ed:14:
         2b:81:3c:0d:0b:e7:06:58:97:f3:60:7d:07:c1:68:61:6d:d9:
         ca:dc:b4:99:19:7a:61:9c:6a:a7:50:58:4a:f7:a4:82:1f:c9:
         81:ac:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:24 2025 by rpki-client