Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa
File:                     472da24f-3022-3399-a161-89f2d647c5b1.roa (raw, json)
Hash identifier:          9tfQ9KkhkwVEy6J49NlwjnxY9egZOunF4O8RQJYi5Vw=
Subject key identifier:   D4:BD:C9:39:DE:01:F7:5C:A1:E8:AE:FB:D1:46:CB:5C:30:0B:E2:3B
Certificate issuer:       /CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
Certificate serial:       010D0C9F43285848100A86BF1F8D2C0A4F2EA780
Authority key identifier: 4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     63452
IP address blocks:        2602:ff50:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:86:bf:1f:8d:2c:0a:4f:2e:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef8d320-c2b4-4718-be9c-ec3f801c0818
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=fff5085f-84d9-4170-94dd-6f42f5ddbb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:25:d6:fa:1b:f5:35:2c:39:eb:b5:7a:31:
                    49:b4:2c:12:e7:1e:be:96:9a:95:07:7f:0f:ed:86:
                    6c:bb:1f:4e:b1:1e:2d:2f:89:49:5c:55:49:84:4f:
                    51:5d:a2:25:ba:fc:a3:47:71:49:af:77:ca:83:f2:
                    bd:93:f0:9e:fa:4b:dd:92:5c:b0:d8:2f:ff:69:18:
                    8c:3d:e0:0c:33:53:9e:5a:13:2a:78:97:eb:5a:a6:
                    8d:08:43:5f:c6:d0:f2:dd:53:55:c7:6d:66:cd:31:
                    58:79:08:d4:88:58:7d:80:b0:13:dd:85:74:fd:dc:
                    10:40:5c:11:7b:5b:3a:c1:2d:aa:b5:42:a5:da:28:
                    55:5c:84:49:e4:e7:96:20:06:da:7c:94:35:48:8a:
                    ce:a5:db:99:0c:a1:1a:7c:c5:07:e4:f8:58:cf:15:
                    97:22:76:cb:53:a1:75:01:93:80:a3:14:d1:ad:b4:
                    45:5d:e7:a9:21:58:15:b3:10:06:e3:c1:14:8a:47:
                    eb:45:18:89:44:ac:9c:c6:d5:12:a0:27:28:40:2c:
                    76:ac:b9:2f:95:99:3c:a8:27:3e:c6:c8:61:2d:fb:
                    0b:bc:91:65:46:f6:e0:e2:5e:b4:10:7b:2c:e1:da:
                    aa:20:59:e8:b7:6e:fe:7c:96:97:4a:63:53:63:0a:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:C9:39:DE:01:F7:5C:A1:E8:AE:FB:D1:46:CB:5C:30:0B:E2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/472da24f-3022-3399-a161-89f2d647c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818/cef8d320-c2b4-4718-be9c-ec3f801c0818.crl

            X509v3 Authority Key Identifier:
                keyid:4E:25:DB:86:B1:2F:12:A6:19:D4:A4:01:D5:5F:F2:92:96:52:43:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cef8d320-c2b4-4718-be9c-ec3f801c0818.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff50:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:3e:b0:ef:c6:41:8e:2d:25:2a:6c:a3:e1:03:71:07:d7:
         d8:87:5a:b4:8b:95:c8:48:97:b2:0d:b0:76:63:5a:46:7b:6c:
         6d:ea:56:b2:42:7e:0b:89:81:9f:87:03:b8:89:06:e0:0d:59:
         df:a9:c3:98:b5:ab:6c:86:19:57:35:5f:95:c1:ee:78:06:41:
         75:71:29:fa:f4:ff:03:25:94:17:0d:89:1b:1c:1f:df:e2:cd:
         b1:67:1c:a8:ef:48:72:6e:f4:1b:06:14:a8:66:03:11:c3:f4:
         a3:c8:40:a3:22:67:ef:a9:78:61:20:8c:81:a2:d6:3b:0c:a1:
         46:6d:be:14:77:28:a5:ac:7a:fd:b1:56:3b:32:4c:f1:d6:9e:
         8c:5c:e0:60:6c:1a:bd:16:03:39:6f:5f:d8:ac:1b:17:fe:f3:
         ab:b4:ed:ce:49:18:46:e7:83:eb:f3:50:6d:da:e5:8b:f1:93:
         fe:7e:e2:c9:e4:0a:c8:35:f8:85:54:7a:60:c7:10:71:e8:a8:
         85:4b:d3:db:4b:86:50:33:8f:ac:3a:f4:b3:0b:54:d1:a2:a9:
         e2:48:dd:d1:83:d8:d0:d5:d4:95:c8:1d:87:07:0d:10:38:22:
         33:67:eb:32:86:37:c1:8b:99:18:7a:9f:d9:02:53:49:b3:e4:
         53:f3:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:23 2025 by rpki-client