Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
File:                     5c2a3d9c-06cf-3783-96af-58915b7ce628.roa (raw, json)
Hash identifier:          1sKyrhgAYShUzDWDxUbTj91qUsjnDH2lWBrw03VEXtI=
Subject key identifier:   76:41:A3:8D:F0:2E:27:63:9E:37:C4:C7:19:0E:49:F5:7A:1E:CD:E4
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285848547038E16F35519409E5F9E0
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:20b6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:38:e1:6f:35:51:94:09:e5:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=d233d30b-14a0-4cbe-afd9-5105315bb333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:34:79:8b:c3:42:c4:8b:32:db:f6:11:8f:
                    ab:96:d7:18:c7:92:79:4f:2c:85:00:b3:5a:42:da:
                    cc:90:47:c7:08:4a:44:bc:07:5f:1d:d0:0b:bf:3d:
                    06:00:bb:16:ff:e8:ba:02:ab:88:1d:90:32:e1:c8:
                    be:c3:e4:c3:49:c0:70:4a:9c:19:25:5d:ba:ec:50:
                    d1:15:1e:e9:96:74:23:ff:a4:4d:34:81:a1:87:85:
                    06:16:cd:62:5c:6f:88:b9:ce:a6:97:8b:99:e5:61:
                    a9:6e:01:4a:7a:c1:35:7a:57:d3:0f:3e:25:42:5d:
                    0a:b6:bc:0e:ed:f8:a3:04:48:ef:59:28:19:a3:38:
                    9b:5f:7a:e2:bf:48:04:0b:60:b9:2c:a9:2c:d5:08:
                    8c:47:18:ea:f0:df:48:bf:a7:d4:cc:c2:7d:96:96:
                    01:29:a7:31:aa:70:6a:c9:5f:2a:c2:21:0d:7a:aa:
                    7f:c4:dc:d4:1b:e2:0f:29:71:19:f4:ec:85:12:42:
                    76:07:36:43:60:a7:78:55:23:0b:b2:4d:7b:81:3b:
                    16:de:92:60:1a:eb:91:10:01:a2:0d:84:c8:34:8a:
                    67:28:f0:ab:c3:f4:e4:53:cb:7b:af:9f:91:0f:78:
                    e1:0c:58:86:89:5d:7c:24:a1:44:f9:a8:9a:47:34:
                    d4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:41:A3:8D:F0:2E:27:63:9E:37:C4:C7:19:0E:49:F5:7A:1E:CD:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/5c2a3d9c-06cf-3783-96af-58915b7ce628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4a:e7:b1:ad:2c:e5:03:9b:37:30:09:e2:36:6b:78:0c:00:
         83:a6:ee:9f:98:e7:c6:5e:44:e7:9e:79:96:0b:88:bf:09:e4:
         2e:46:ef:22:2a:b3:31:ae:b6:54:77:cd:a0:83:d6:8a:f3:b6:
         53:1d:45:4b:9a:df:5f:a4:06:88:4d:97:c6:6a:26:dd:22:55:
         94:5a:cf:3e:19:f3:ac:d2:82:e6:fc:85:1e:6f:8e:ba:5a:b8:
         f3:4f:f1:ec:3e:b5:da:65:a0:b1:ba:25:6b:19:1f:16:f6:9d:
         49:db:40:78:58:ab:42:49:cb:ac:7c:2a:4b:db:c7:8f:0e:03:
         e5:7f:9a:8f:01:55:22:79:a4:2c:5f:11:4f:78:f5:9e:d6:d0:
         a5:5a:17:ba:ca:ae:e5:c7:f7:27:1a:16:af:ae:6f:cc:d0:24:
         ce:bc:0e:68:74:8c:c2:bf:a2:ef:39:5d:9d:49:fb:67:47:21:
         67:df:8c:83:b5:4a:7a:2e:99:94:be:5d:05:5e:24:41:eb:62:
         72:8e:88:75:be:c9:f5:7e:4d:50:52:ff:ea:31:c3:9b:d7:df:
         c9:20:95:83:06:8a:c5:49:19:60:9c:d4:85:94:ad:03:2b:8e:
         69:1e:4d:f1:d9:10:4d:6d:c4:8a:65:68:4f:b4:42:20:3d:98:
         f2:4d:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:21 2025 by rpki-client