Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa
File:                     4435826d-b85c-3e62-9b7a-608136d8b2ae.roa (raw, json)
Hash identifier:          7KQVbA2rpDaoDeOvEI1JcQalM7Y3UuDGvI2J8fuKx6Q=
Subject key identifier:   7B:3C:65:82:3F:59:F7:94:F9:C3:6B:72:F7:8F:0F:52:FF:EE:82:C2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC1ECCB686DA92EA255600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:3035::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:1e:cc:b6:86:da:92:ea:25:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=1a7e9266-8dc2-40b1-9c82-ef70ee1bfc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:21:a5:bb:fd:f9:f5:fe:23:c5:13:a5:03:
                    f3:71:92:6d:b3:3b:ae:6b:49:e6:d2:25:67:29:5e:
                    0c:a4:14:d0:64:12:15:23:a2:c9:13:7e:00:65:e7:
                    5b:c2:d9:13:9b:07:e2:1e:83:f0:85:4d:b5:a0:bb:
                    8f:61:14:21:c4:6e:77:41:cb:5f:6d:57:0a:6c:14:
                    5d:a3:44:6b:df:5d:0f:51:70:2d:d0:3f:03:56:90:
                    f4:3d:43:ab:ac:60:90:05:45:f9:bc:b6:3a:0d:cd:
                    10:0e:c8:63:1c:91:56:0a:f3:95:89:7a:1b:b0:13:
                    df:be:7a:d6:5e:a1:8c:4f:e1:f1:01:81:47:c1:24:
                    99:f1:ec:96:a5:77:34:fc:b0:c9:db:41:1e:3a:71:
                    08:5c:1d:98:f8:0b:b3:a6:bd:cb:9d:62:62:bc:1c:
                    0b:be:c9:5f:ae:d8:1b:6a:de:4b:61:b9:e2:cd:6d:
                    64:8e:15:6a:79:31:5e:d1:50:f4:65:f8:bc:cf:2f:
                    e5:48:41:70:18:80:4f:3b:d4:88:f6:7c:88:c0:70:
                    a8:4c:74:8d:4e:c5:44:8b:f2:05:d4:8e:9a:d2:4e:
                    71:eb:cb:cc:1f:b0:4b:39:1b:9b:4b:d0:34:01:06:
                    1b:0b:73:bd:af:b2:40:96:f9:3d:d2:aa:f1:cf:df:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:65:82:3F:59:F7:94:F9:C3:6B:72:F7:8F:0F:52:FF:EE:82:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4435826d-b85c-3e62-9b7a-608136d8b2ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c2:fd:3b:bc:dd:74:9d:fd:d3:07:18:20:ba:c2:44:30:2b:
         3c:14:1e:40:d2:a1:b8:53:1c:ed:6a:ee:8c:e0:bc:8d:8e:34:
         d5:72:8e:ad:5e:65:f3:cb:7f:d7:5c:ad:15:c8:45:37:43:a0:
         69:bc:72:9a:be:fc:fd:9a:8a:76:f7:c2:e8:2c:d7:13:b9:0d:
         3b:32:e2:55:37:00:52:7c:58:bb:32:37:c0:14:1f:13:11:92:
         3f:31:9c:6f:8d:9e:dc:61:a9:22:6a:47:10:d0:39:9d:7e:73:
         5e:9d:ae:9b:8c:11:58:1f:03:17:04:b0:16:af:15:23:ea:4b:
         04:57:0c:cb:af:1f:87:e0:56:61:be:ef:0e:b7:40:fb:61:04:
         86:c8:84:ed:14:69:0e:da:9f:6c:a9:02:5c:37:be:4b:b0:0c:
         fe:e8:95:49:e7:87:c8:a3:c8:53:72:c5:75:12:fb:e8:15:c6:
         9f:cb:24:01:c2:36:b1:2c:f2:f8:b1:f9:82:27:08:d0:a6:2a:
         21:e8:97:d8:7e:2a:5a:f8:d8:09:fc:23:b7:e0:49:3a:c3:00:
         3b:1b:4e:4a:16:dd:b9:27:93:60:46:d5:10:53:24:80:05:49:
         70:b9:61:a7:84:c6:76:29:0b:c0:70:93:ac:58:df:7e:14:b2:
         67:5e:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:01:56 2025 by rpki-client