Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa
File:                     961600cd-6ae6-3596-924d-2a01837588b7.roa (raw, json)
Hash identifier:          8lp0rYKSPJf02a8qH/LVkKn2p9M/Iwa/g0yOoK8cqDg=
Subject key identifier:   D1:8B:B3:D6:95:06:60:AB:AB:41:72:F3:5C:45:DE:33:57:66:C7:D0
Certificate issuer:       /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
Certificate serial:       010D0C9F432858492CB20853DCD8C7E55F595B80
Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     393562
IP address blocks:        2604:640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:08:53:dc:d8:c7:e5:5f:59:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3e8183c0-1a0f-44a2-a036-65d723ba213c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:aa:77:84:ae:2f:64:21:2c:1c:ae:35:ad:fa:
                    53:13:f4:00:04:9a:d2:41:d3:8f:d4:2d:44:16:58:
                    02:48:5c:56:76:80:f8:27:4e:b3:3a:a0:60:65:98:
                    6a:e9:7a:ed:74:9f:6b:84:96:ac:7f:d1:3b:f2:79:
                    ef:1e:ef:c0:ee:8d:ba:aa:56:95:8f:56:18:28:65:
                    a5:e9:80:73:00:ef:58:f7:5a:c0:9d:6e:3a:3d:10:
                    10:63:ef:cf:c4:64:30:65:57:4c:4d:ea:f3:29:1a:
                    57:ee:8d:93:47:23:e0:f9:82:a4:cd:10:77:1f:b6:
                    80:bc:b8:90:5d:fd:a3:e8:23:01:83:a2:47:2a:b5:
                    9b:b4:90:23:ec:b8:ff:4a:9a:bb:ca:18:a8:0b:cc:
                    04:7b:bc:88:58:dd:51:76:8a:0f:1e:ef:99:2b:a8:
                    42:97:65:0a:04:32:5a:5d:3e:6f:8b:77:7c:d5:d5:
                    6d:b0:5f:65:cd:96:c5:e9:52:81:b8:76:af:fa:bd:
                    6c:d0:3a:f6:51:d9:b3:1d:1a:12:dd:82:35:f9:c4:
                    21:f5:9c:bc:9b:01:e6:53:83:5e:54:44:1b:54:88:
                    88:aa:3f:ad:05:0f:ce:c8:4b:a4:96:26:f6:c2:88:
                    3f:ae:eb:87:80:4b:86:a7:30:71:83:f6:5e:dc:48:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:B3:D6:95:06:60:AB:AB:41:72:F3:5C:45:DE:33:57:66:C7:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/961600cd-6ae6-3596-924d-2a01837588b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl

            X509v3 Authority Key Identifier:
                keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:ef:5e:d9:1e:aa:c5:a1:75:a6:d8:9a:70:c8:dd:84:da:
         f5:1c:83:d5:15:53:a1:81:c7:32:2b:91:38:0f:36:c7:e1:80:
         28:42:03:58:6c:25:46:01:60:1f:44:3b:d3:d8:4d:3b:a0:93:
         45:ce:b4:56:9e:e6:fe:61:70:76:50:80:91:43:92:e7:b0:9d:
         5a:c8:a8:ac:ab:d4:3c:e3:36:77:f3:b8:fb:e4:10:7d:e9:bf:
         0b:63:e9:30:fb:f8:76:fa:25:e2:1b:66:c2:b9:60:cc:43:4f:
         18:9d:b9:56:18:c2:58:50:7e:06:a0:57:72:00:99:a4:5f:0a:
         ad:df:df:67:19:e2:61:54:de:ef:16:d7:e0:32:e6:2c:03:58:
         bf:fb:7f:11:ff:a5:f9:80:b6:2c:2b:4c:e6:bd:55:69:00:89:
         98:60:99:78:65:b9:6d:ba:47:7c:29:2b:9e:25:f4:1d:f1:c0:
         4a:0f:ad:74:a7:4b:29:a4:46:da:ff:16:b1:8d:93:0b:08:9b:
         ca:61:6c:75:f1:49:2d:0f:d2:a5:e5:ce:d6:42:2b:21:e0:f1:
         ea:c0:2c:00:52:11:29:d7:5b:f5:d4:72:70:24:5b:6c:7d:bf:
         6f:7c:a4:94:eb:a5:f1:57:31:d7:63:30:ec:83:21:e9:71:6c:
         6e:14:f3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:11:14 2025 by rpki-client