Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/d260904f-fbf9-3a00-9bc5-d182b64c78b7.roa
File:                     d260904f-fbf9-3a00-9bc5-d182b64c78b7.roa (raw, json)
Hash identifier:          w38y5x4pnbI1wxbZowTKBChKN3ntOmMOmVhmMG0Tkpc=
Subject key identifier:   B5:88:7E:94:F9:DC:4E:F7:37:3E:EC:43:F7:93:1E:EB:97:02:28:E0
Certificate issuer:       /CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47
Certificate serial:       010D0C9F43285848E16BE39504143198FEBC9900
Authority key identifier: 93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/d260904f-fbf9-3a00-9bc5-d182b64c78b7.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     4138
IP address blocks:        2604:55c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e3:95:04:14:31:98:fe:bc:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=0c95676b-b256-4113-82fa-968d98fd0856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:fe:a0:18:9b:0a:ca:c1:88:db:3b:fd:66:
                    e8:42:28:b9:56:77:f7:5b:37:b9:8a:34:3b:97:c1:
                    d4:05:0a:5e:e6:56:ff:3c:6c:bb:3c:bd:99:ff:85:
                    17:79:9c:03:f5:95:40:e7:9a:de:1a:51:ee:73:1b:
                    a5:bb:34:45:90:b8:7d:3f:07:70:62:3f:f3:63:0b:
                    a7:13:c4:b6:0f:cb:82:cb:70:33:27:47:4d:00:c7:
                    e6:f7:45:f2:1d:5f:52:84:9c:2d:59:5d:9a:d7:4e:
                    b9:bd:ee:41:8a:27:74:3c:3c:69:99:99:10:ab:62:
                    db:1b:4c:b5:61:17:81:fe:58:1f:ff:7e:6a:23:a2:
                    e5:70:87:87:f0:47:55:9d:ad:6e:90:dd:9c:3b:10:
                    d0:8e:ae:99:28:1c:fd:3b:29:ee:9b:51:83:e7:45:
                    b4:26:05:a9:8d:dc:cc:69:5b:5e:4c:c9:31:08:0f:
                    3d:4b:bf:57:a4:ed:9a:4c:8d:35:6d:70:b1:be:52:
                    3b:d9:fc:37:aa:d9:e6:a3:bb:af:fa:99:3d:9d:14:
                    89:0a:58:46:9c:2a:e1:c6:81:85:28:64:a2:d0:44:
                    cc:70:e8:07:c8:8b:a2:00:83:d5:51:ea:62:ab:60:
                    cd:7b:31:28:a3:77:93:2b:8e:17:ba:4b:d6:3d:e9:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:7E:94:F9:DC:4E:F7:37:3E:EC:43:F7:93:1E:EB:97:02:28:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/d260904f-fbf9-3a00-9bc5-d182b64c78b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.crl

            X509v3 Authority Key Identifier:
                keyid:93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:55c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:62:e8:bb:67:d6:ac:ff:84:e7:c2:0d:56:1f:1d:da:30:
         2b:dd:b5:54:96:d1:eb:07:d9:c2:e4:fa:b1:db:1a:e0:5f:40:
         7b:4c:1a:1b:e1:3a:a7:f4:e9:5d:fe:cd:a7:44:9b:29:8a:da:
         37:6b:5a:84:1b:80:f4:c3:6c:29:b0:19:31:05:99:31:89:c6:
         ac:d3:75:64:20:ca:9b:b0:25:67:37:bb:bd:63:fd:a9:5d:19:
         9e:c8:9d:ba:0f:cc:cb:2a:9f:ee:1d:74:80:e0:f5:64:94:68:
         8b:af:11:a0:30:48:56:ff:c0:10:5e:be:54:c1:e3:15:dd:91:
         cf:c4:9e:9e:3b:3b:fd:93:c9:5f:4d:65:34:3d:28:e6:63:7f:
         c8:a1:56:f1:c1:c8:ab:44:52:6f:ff:88:27:39:16:dc:ed:9b:
         5c:df:60:4c:2a:07:94:db:66:b7:91:b7:2c:67:4e:ff:28:33:
         6b:ee:60:0f:5d:72:62:80:c0:0c:6f:05:94:fa:a1:ea:be:fa:
         48:be:96:58:b6:97:e0:39:7a:a3:89:23:02:16:d2:9b:18:1c:
         a9:7a:63:49:13:88:a9:5e:e1:6c:77:75:81:98:5e:f2:44:71:
         61:17:7c:05:9e:6b:b7:80:a7:cd:d4:44:1e:3f:85:0d:f6:c8:
         d9:b4:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:59:24 2025 by rpki-client