Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41417c8d-93ea-38d0-8fc3-295ae50963ed.roa
File:                     41417c8d-93ea-38d0-8fc3-295ae50963ed.roa (raw, json)
Hash identifier:          wxJ9PwMCE7djyFPwEQhahCZQXTBGaSx9qD37QqcwO7k=
Subject key identifier:   CB:D1:2C:80:C9:D7:9B:01:BF:56:B5:CA:93:45:5F:68:62:E1:34:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5D7BD51A529E4C9424DA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41417c8d-93ea-38d0-8fc3-295ae50963ed.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:4038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:5d:7b:d5:1a:52:9e:4c:94:24:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=a8df83d5-4610-4c43-bfbc-ee69469c4217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:e9:a4:0d:5d:65:a7:f4:fa:f7:bd:8b:68:
                    65:7f:7f:75:cc:ee:31:74:90:33:58:d6:c4:a6:12:
                    6c:86:01:24:43:d3:9a:31:c9:f6:b8:f0:7c:a2:3c:
                    65:d0:d5:ea:c0:ff:f5:3c:00:0d:4b:9c:8b:a8:09:
                    d5:72:47:f5:58:80:11:f5:c3:c2:8a:26:64:dc:58:
                    d4:df:bb:38:72:92:30:05:82:d7:1c:8a:09:e8:f1:
                    17:b4:6c:02:9d:34:ec:78:7d:2a:c1:84:d1:a4:2c:
                    60:f7:bf:48:0e:c0:28:ea:5b:e6:8e:5e:46:e0:2b:
                    04:8b:89:73:10:37:32:79:aa:4d:20:82:50:b1:7a:
                    ce:26:28:8b:4a:60:42:30:2a:20:b7:9d:4b:eb:a4:
                    a2:1e:2c:29:5a:bf:ac:f2:c2:78:e3:f2:6a:d7:8f:
                    a2:39:07:03:e1:c6:10:c8:bc:1e:7f:49:7b:c9:d3:
                    b3:dd:99:86:4e:2a:6f:1f:69:68:fb:35:29:87:53:
                    9f:cd:4a:c4:9f:1f:bd:a5:22:8e:6a:fa:02:d8:84:
                    c6:a4:67:74:f3:2a:c8:1f:79:dc:f8:56:43:25:c0:
                    c7:df:6d:b3:81:70:14:9d:0d:10:b0:53:0a:b2:e9:
                    fc:36:89:cc:3b:84:59:bf:1c:51:88:5f:77:df:19:
                    8d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:2C:80:C9:D7:9B:01:BF:56:B5:CA:93:45:5F:68:62:E1:34:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/41417c8d-93ea-38d0-8fc3-295ae50963ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:a2:e5:e3:f7:5e:26:33:dc:e3:8a:7f:e1:21:ca:3a:37:
         af:cf:50:37:2b:ef:0c:e9:b7:bb:58:ed:c1:f7:06:8c:58:77:
         fb:dc:71:00:c5:ea:aa:8c:3e:62:ed:c9:66:f7:10:ab:fb:04:
         34:c0:5f:68:43:c1:51:20:2e:18:91:55:64:1b:f2:4f:d3:71:
         ec:34:f5:ca:92:3c:fc:c8:f4:c6:6f:1c:3b:c2:10:33:a3:02:
         a8:31:5a:ee:51:97:2d:46:bb:81:26:bf:77:20:39:d4:d7:c5:
         f3:b5:cd:6a:0d:c7:96:5f:cd:e6:b1:f2:9c:57:63:f9:dd:a4:
         0d:58:64:dd:1f:22:24:f5:e7:71:ff:f5:e2:db:ce:f4:c4:25:
         99:8c:b4:bd:dd:8f:41:13:c4:a0:83:76:e5:05:61:18:cc:23:
         86:37:a5:58:fd:3d:9e:35:81:93:92:36:43:52:fd:bf:44:64:
         f1:91:1c:73:25:a6:d1:41:3a:12:1a:aa:4b:ee:8d:98:16:e9:
         3b:61:cd:54:4e:b3:56:3b:a4:a1:e6:29:81:a1:45:d1:1f:ff:
         a1:19:21:7a:98:4a:40:40:5e:d4:fc:b6:2f:ce:91:c7:e3:d9:
         c8:94:7c:75:03:a6:ae:af:4e:8a:05:10:d3:f1:9b:8d:42:b3:
         68:4c:08:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:58 2025 by rpki-client