Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/11f5c5b4-8580-3ca1-8c7b-d5d118dafed0.roa
File:                     11f5c5b4-8580-3ca1-8c7b-d5d118dafed0.roa (raw, json)
Hash identifier:          8QJP/tCMXVy8wejV8eEz6X5MguQYNUSAvMjoMiKQ7z8=
Subject key identifier:   DD:00:0B:C7:4A:B2:2E:FA:E2:CF:D3:95:54:DF:C2:2C:F0:03:FF:22
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9E3D1E21C19DACFB6278
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/11f5c5b4-8580-3ca1-8c7b-d5d118dafed0.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2052::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9e:3d:1e:21:c1:9d:ac:fb:62:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=01f99c66-e0ee-4954-9510-72cdf378ec2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:70:7a:03:17:aa:15:6c:2b:77:c7:71:84:
                    79:61:1f:7c:df:9e:db:ba:64:de:2d:65:e9:eb:e6:
                    d9:02:6a:d0:a5:04:39:6c:6d:93:9c:99:28:4f:7d:
                    63:07:86:70:44:e6:bd:93:c7:88:e2:4e:03:38:88:
                    ff:0b:00:97:1a:83:dd:6a:ed:6a:36:95:c4:9d:98:
                    dd:04:db:52:9f:75:2c:b0:ba:ce:33:e7:50:1c:32:
                    97:af:8f:06:c5:25:5d:b0:c2:30:a4:11:a3:82:b7:
                    78:fb:f2:d3:05:f4:6a:5b:3a:5a:2e:f8:4c:33:59:
                    2c:f1:b2:e1:13:c4:86:a9:d3:71:91:08:8d:42:5c:
                    cb:ed:5f:71:9b:c4:7b:f1:e0:65:ac:73:b7:6a:04:
                    38:59:3b:1d:26:0a:4d:8d:34:d3:e7:47:17:da:09:
                    53:db:a7:97:e9:c4:fd:11:21:c6:92:77:28:0a:1c:
                    67:a4:ce:65:da:e0:89:85:59:1d:10:5b:07:f5:5f:
                    d9:ec:7b:f7:e2:73:16:cd:1e:31:db:4b:35:19:90:
                    65:70:0b:b3:2b:c0:5e:a3:96:75:18:07:17:b1:f9:
                    1f:4e:03:32:b1:e1:a4:dc:9c:7d:5b:49:5e:d7:0d:
                    fe:1b:40:10:4e:98:84:88:68:f8:19:b9:aa:43:54:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:0B:C7:4A:B2:2E:FA:E2:CF:D3:95:54:DF:C2:2C:F0:03:FF:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/11f5c5b4-8580-3ca1-8c7b-d5d118dafed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2052::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:4e:2b:cb:3e:2e:63:e7:e2:07:09:32:e6:96:83:72:31:
         97:0e:49:4f:d4:69:e3:78:f1:6f:ee:ea:a0:15:48:e5:c9:7b:
         5d:0e:0a:f7:b0:e5:cd:e6:98:1c:40:7b:73:0b:c0:61:d5:28:
         52:f8:19:87:71:cc:02:d2:c1:2c:f6:ae:4a:6a:62:c5:d3:8b:
         e3:8c:fb:27:88:7a:46:e5:ec:32:72:f5:bf:35:d7:18:71:5d:
         0c:5d:1a:9a:3e:ee:87:e2:96:65:c5:90:33:93:5b:c7:99:21:
         5f:60:4c:4a:44:43:50:48:1a:83:d4:f6:5c:2c:6e:3a:4b:b0:
         dd:64:bf:db:76:b5:24:6c:4f:23:25:dd:85:5f:cd:93:b0:ca:
         cb:5a:ba:51:7f:db:86:45:8b:a5:b4:bf:4a:08:bc:15:f0:68:
         41:10:d4:9f:a6:be:e7:08:78:fe:b8:46:c1:47:69:92:f1:dd:
         70:d5:26:48:50:a3:3b:75:06:ea:10:c1:6f:53:87:94:a0:16:
         df:c6:9c:1d:1a:55:a7:9f:18:55:b0:55:10:d6:92:a2:46:44:
         c7:06:a5:08:e4:f8:57:44:4a:98:5c:43:6e:fc:cb:7a:b7:99:
         dc:2e:e2:da:40:3b:82:10:54:a9:45:db:cc:62:9c:49:25:62:
         64:0d:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:00:59 2025 by rpki-client