Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/2679bfb0-9ee2-3d8d-b47f-3e2b08625cc1.roa
File:                     2679bfb0-9ee2-3d8d-b47f-3e2b08625cc1.roa (raw, json)
Hash identifier:          lMjJ09cbBJEcQW6DFJWtk/d97QaGhIDMQK4Ht35Hmmo=
Subject key identifier:   AC:EF:26:45:6C:41:9D:23:60:3C:4B:58:05:B5:BC:05:58:A2:58:05
Certificate issuer:       /CN=c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51
Certificate serial:       010D0C9F43285848DEA11B7C8585F1489F673D00
Authority key identifier: 42:4B:FB:78:3D:08:68:24:0A:F3:66:B2:A0:DA:1D:60:2C:55:88:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/2679bfb0-9ee2-3d8d-b47f-3e2b08625cc1.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     22773
IP address blocks:        2606:6100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1b:7c:85:85:f1:48:9f:67:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=889e6426-5bbd-4e37-af4d-899c29f62e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:5d:25:72:b3:d6:c6:fd:a8:33:f0:00:b2:
                    40:ac:0d:48:8e:2c:2b:d3:45:7d:82:f3:87:5a:54:
                    aa:67:c4:40:85:f9:fc:88:5e:29:ae:0d:4e:25:76:
                    a5:4d:41:f5:0d:e4:b1:dc:0f:02:ed:bd:ca:e3:10:
                    27:f7:12:4c:dd:44:96:e5:e6:e1:e1:ce:16:49:5d:
                    78:45:0d:c5:eb:2c:92:f5:24:ca:e6:e3:9a:43:1d:
                    4f:b6:5e:90:b0:4c:b6:a5:3f:d0:c4:1f:d4:4e:2f:
                    75:4f:f2:2b:cd:e6:f0:ed:82:4c:60:b7:98:76:d1:
                    22:d1:84:c6:65:77:0f:21:b2:25:06:67:9b:74:80:
                    35:34:5d:ed:a9:7d:11:f5:b8:22:32:87:c2:e3:2c:
                    7b:f1:44:53:07:fb:d0:5f:71:06:31:58:58:e3:ca:
                    d3:8f:c0:95:99:08:d8:91:84:4a:cc:66:a1:16:23:
                    56:93:8d:51:8c:20:94:68:da:fc:64:9f:26:da:1d:
                    9e:19:a3:b1:e2:b0:50:3e:2e:5b:09:5a:d4:ce:b7:
                    5b:a0:55:ac:ad:47:c9:12:7e:1a:41:6e:61:c5:14:
                    55:9d:c7:23:e6:79:43:eb:94:ff:0b:4f:4f:c3:d8:
                    c2:14:cc:05:60:f0:52:a9:c3:ea:48:21:2b:c6:4d:
                    e9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:26:45:6C:41:9D:23:60:3C:4B:58:05:B5:BC:05:58:A2:58:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/2679bfb0-9ee2-3d8d-b47f-3e2b08625cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.crl

            X509v3 Authority Key Identifier:
                keyid:42:4B:FB:78:3D:08:68:24:0A:F3:66:B2:A0:DA:1D:60:2C:55:88:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2d85a6e-c6ea-4eac-b3ad-f0bca90aaf51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:86:c2:81:9a:c9:57:bf:64:e5:09:2b:90:5d:e7:b6:3d:a9:
         e7:0e:63:9e:96:58:7d:9f:a4:f8:d5:39:d0:32:18:3d:c2:a9:
         2d:21:f7:14:2c:bc:08:94:3d:6a:ed:53:25:ec:a6:d1:67:c2:
         32:bd:b5:b6:be:4b:e7:67:20:55:49:d6:a7:e9:83:6d:44:58:
         b4:ca:c7:52:e6:c4:de:d4:b2:d7:67:16:e6:42:3c:63:7e:8d:
         e9:bb:77:93:9b:fd:03:0a:9c:97:86:95:39:65:d0:8b:5d:d1:
         14:97:5f:b5:09:31:1d:e3:1b:df:49:70:cb:07:4c:bb:5c:13:
         22:c7:30:c3:d9:03:a8:f2:6a:a0:05:79:a3:8a:8f:66:51:79:
         0e:08:76:84:ce:b8:02:6a:86:d7:7d:4c:11:35:28:98:29:c5:
         df:b4:b7:9c:d0:e7:2a:9a:24:ea:4a:ef:28:d0:20:3a:51:65:
         5d:98:55:b3:db:aa:29:cb:61:3d:fd:6f:e9:bf:f2:50:2b:00:
         c3:63:46:fa:a3:76:87:5f:50:79:15:c5:a1:a1:82:10:2c:a4:
         41:5e:6b:bf:8f:08:10:32:80:5d:46:3e:fa:c5:06:c0:68:91:
         52:b2:28:f2:78:3f:4c:f5:62:ac:90:44:bc:b7:73:4d:aa:68:
         61:02:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:26 2025 by rpki-client