Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa
File:                     dc025816-699e-3d55-83b2-314082b93aad.roa (raw, json)
Hash identifier:          NN+W2xU/3JPWL02GFufsi6vcBx2Aan6gRhL3jDf0xGY=
Subject key identifier:   A1:BF:69:79:DA:0F:5B:62:3B:AB:55:0B:0B:95:2A:CD:02:89:3D:3C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC1B262C62B341D6DE5000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:1b:26:2c:62:b3:41:d6:de:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=16a2495d-9b99-47dc-96ca-72b8ab14fa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:d2:a0:a4:a2:45:e2:68:f4:1f:c9:f7:5e:
                    6e:90:7c:7d:1e:e1:08:42:c3:2a:b0:c6:e1:9d:7d:
                    59:c3:2d:55:7d:e8:a0:f7:f8:74:c1:d3:2d:4d:d1:
                    a6:9b:06:82:1a:51:b5:f6:f7:85:35:7c:e0:43:35:
                    d8:5d:aa:df:d6:e5:bd:79:fe:94:33:d3:27:74:5f:
                    5b:1c:4b:37:5f:b3:3f:d8:1e:c8:b1:35:a7:76:71:
                    43:7c:b8:bf:3f:0f:f8:3b:71:9c:28:1d:06:c2:69:
                    d5:75:4d:f7:1d:5a:3e:59:23:f9:f4:79:a1:54:ea:
                    e3:cd:64:71:68:e5:68:d2:80:86:d6:56:2b:0c:1b:
                    5d:94:c3:78:ec:00:d2:37:31:80:45:b8:ab:63:d4:
                    b0:21:e6:4b:07:73:ba:5d:79:20:00:57:56:1f:f5:
                    64:99:ab:a5:14:ee:dc:22:f7:43:a6:5c:b6:0b:7d:
                    f1:c4:bf:c4:3f:f8:53:52:b1:97:a9:71:bb:69:d6:
                    3f:8d:27:56:a5:5f:76:13:86:ca:ea:39:82:c3:39:
                    cc:40:c3:3b:7d:39:ad:61:6e:5f:6b:b2:1f:63:d3:
                    6b:dd:a2:d4:ac:d5:d2:33:0b:3b:1e:21:83:02:ca:
                    09:2d:17:36:9f:7e:31:0e:00:0b:7a:1d:62:f7:8b:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BF:69:79:DA:0F:5B:62:3B:AB:55:0B:0B:95:2A:CD:02:89:3D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:ec::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:f1:90:68:05:e3:79:36:f7:82:4d:d4:4b:65:0d:89:f6:
         8d:2a:76:05:cb:37:ed:7c:75:53:5c:ec:ac:72:75:64:4b:c8:
         3b:c5:7a:84:e2:4f:24:ec:25:13:9d:98:e3:f3:9e:14:b6:bf:
         0f:f6:25:dd:b1:b5:61:2c:6d:bd:33:9d:48:39:88:56:e9:ac:
         80:a5:58:ba:7b:98:33:98:63:ba:03:3f:aa:98:0c:0e:96:0f:
         67:df:e9:04:0c:60:68:8e:b1:b5:09:ca:bd:b0:47:8d:13:68:
         fe:7e:d8:88:29:0f:45:6f:b0:b2:30:e7:50:10:36:6a:a1:bf:
         21:77:9a:0c:09:5e:84:28:e9:a4:a7:fa:e3:ae:de:de:62:44:
         35:06:9a:07:d5:c2:34:8e:e0:5c:02:72:41:e2:e4:93:ae:94:
         d4:2e:85:e8:03:92:74:47:e2:20:02:65:51:b9:e7:b6:b2:74:
         00:cb:32:b3:6c:3c:df:7d:94:06:d4:31:e4:cf:94:59:69:e7:
         1a:0a:86:db:76:26:70:28:28:a0:e9:f6:b6:28:72:12:7e:bd:
         b8:c8:c0:74:cb:2e:85:ad:1b:77:60:f5:b5:87:77:a4:23:ac:
         6f:01:a8:17:09:53:33:0d:50:0a:50:12:95:80:9b:aa:70:f8:
         76:15:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:19 2025 by rpki-client