Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa
File:                     b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa (raw, json)
Hash identifier:          k7pJH5yRR8dkQ0e85UYV1J2egUDImdhRlM/8gdytFx8=
Subject key identifier:   B9:AA:3B:35:50:04:A3:56:02:20:27:96:83:BC:65:C3:02:BE:67:08
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285848547038758E49EF05BCF13040
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     399976
IP address blocks:        2602:80c:20b0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:38:75:8e:49:ef:05:bc:f1:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=60b80b7f-c871-42aa-baeb-19037d57e741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:bb:9f:60:5c:b2:d4:8e:50:f0:71:f4:e1:
                    20:c3:c0:65:fd:21:66:64:ed:23:21:b2:d5:1d:12:
                    56:30:fb:78:c9:14:14:8e:60:a9:ea:d5:8c:c7:3b:
                    af:f4:d6:00:e2:86:39:df:c7:90:87:6c:c6:b1:28:
                    96:ba:9f:8c:4c:04:e1:dd:03:cb:73:49:ce:37:3d:
                    cd:09:99:58:20:be:a2:cb:be:e5:0a:c8:f6:5c:37:
                    ab:de:60:0d:d0:26:ba:87:b8:db:61:a8:f9:d9:0b:
                    ad:e8:7d:95:d7:2e:72:b3:7f:a6:81:84:de:e1:d9:
                    ca:18:ed:e0:a9:79:af:62:98:6b:c0:85:1f:5f:54:
                    23:76:77:29:9d:fd:42:e9:0f:5b:60:f9:dd:78:54:
                    d0:04:44:c2:41:53:bc:16:ad:9f:d6:a1:40:a4:53:
                    49:5e:ca:09:a8:1f:d1:40:38:7f:c6:95:96:18:5a:
                    23:17:a7:bd:56:0f:ae:62:aa:0b:d0:41:f9:55:3f:
                    56:94:fd:a1:26:86:a7:53:64:e5:f7:66:2d:79:e2:
                    f2:b2:f9:bf:a3:9f:e1:75:74:fd:f4:16:45:81:18:
                    82:ea:a8:c6:30:91:22:5a:43:77:2d:8d:f2:b1:a3:
                    0e:b3:4e:32:ac:4a:91:9d:6f:b6:d0:de:a5:41:8d:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:3B:35:50:04:A3:56:02:20:27:96:83:BC:65:C3:02:BE:67:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/b2b26512-6eb9-336f-bcab-4bbf4fa68512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cc:75:e2:0f:29:51:03:ae:c5:cb:d7:cd:2e:0f:42:d8:2d:
         ef:a4:e9:ee:3e:5a:81:15:bd:6e:53:6c:d4:16:14:f4:3f:ee:
         dc:1c:44:3b:95:aa:cf:af:ac:a3:1b:fe:89:25:ce:8a:cb:02:
         27:b4:39:66:d6:a5:86:1e:57:86:74:f8:f7:28:42:3b:96:77:
         e6:f8:c5:31:27:a3:cc:4d:02:d0:76:44:05:40:65:8a:7e:21:
         a0:a4:e0:d0:a9:d3:2f:23:c0:7a:f4:01:1b:7a:36:65:64:43:
         e2:4b:77:83:21:32:2d:8e:bd:8d:6d:27:cb:fb:2f:6a:ad:cd:
         85:cc:6d:be:97:5c:41:7d:42:81:a0:4e:6a:3d:1f:b9:a2:0b:
         fd:42:c1:a8:f6:b0:c5:b5:e6:81:c3:a4:5e:10:06:ab:b9:6f:
         8e:82:c2:9e:82:fa:b7:bd:81:b2:4e:6b:40:4b:e8:97:89:8a:
         81:5f:73:7c:ac:28:2c:2a:29:76:cf:82:28:d5:e6:d0:40:3d:
         21:04:9f:c3:18:74:98:bb:bd:78:38:fb:c8:63:87:6c:e6:7c:
         41:94:bd:fc:6c:32:e9:9f:96:f2:b9:26:7c:40:e0:6d:ff:bc:
         a2:02:e5:5d:54:db:ae:e8:6a:6b:70:e2:5f:d6:38:58:10:fb:
         70:4d:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:46 2025 by rpki-client