Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa
File:                     3c392901-b4fa-3820-a976-1599719fb8ac.roa (raw, json)
Hash identifier:          mt2Jmy7Uc2OhNdnAauyYIcKk6JR8ZYrt/zNmohoyAI8=
Subject key identifier:   13:A8:1D:C2:C0:8D:10:6F:E6:2F:47:EF:70:32:DE:D2:9D:54:95:DE
Certificate issuer:       /CN=f8ec33fe-caa3-4813-9088-b739c782ce1a
Certificate serial:       010D0C9F4328584913AC1DDD0A3C84FBFB94EB00
Authority key identifier: 68:38:1F:AD:84:E2:AA:7C:59:36:ED:66:0A:17:20:60:1A:AA:CC:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     30081
IP address blocks:        2605:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1d:dd:0a:3c:84:fb:fb:94:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec33fe-caa3-4813-9088-b739c782ce1a
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=770e2535-ae0f-493e-8f82-f602f4ea0158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:35:ec:da:e9:39:51:34:1f:34:6a:94:5b:
                    35:88:7c:d0:63:76:f2:c1:93:96:5f:59:8c:73:20:
                    13:e6:91:65:76:ec:34:05:19:4b:d2:ad:39:07:82:
                    25:a7:c6:40:a1:ce:75:89:15:ce:8f:24:5f:4a:53:
                    85:40:2c:7f:6b:32:e1:cc:5d:7d:9a:2a:e9:62:bb:
                    5b:97:1e:71:dc:b7:1f:90:fc:5b:59:2d:3e:78:6a:
                    b6:3b:da:5e:b1:bd:5f:05:01:62:dd:22:14:e9:88:
                    a6:84:f9:73:fa:4f:69:1b:de:48:27:48:33:02:ee:
                    88:dd:b2:ed:e8:e5:c7:99:b2:80:94:bb:11:c1:92:
                    96:9f:7f:1b:08:7d:39:40:f7:94:52:5f:c7:a6:df:
                    ef:0f:69:b0:79:27:44:f3:b2:45:93:53:f4:df:47:
                    0d:3d:ac:4b:30:93:d2:55:bc:eb:5a:91:58:6a:b6:
                    a2:d2:28:e4:d7:16:ae:30:10:26:8c:2a:55:9c:20:
                    ad:0b:9a:75:a6:09:8c:66:a7:10:41:27:64:8a:63:
                    93:db:2c:87:a4:4d:e1:06:56:e7:aa:dc:86:1d:72:
                    49:b4:f9:e2:81:75:8c:8c:56:17:29:77:81:9d:46:
                    02:3e:ca:48:ed:e3:d2:d5:43:cb:62:aa:8e:3d:e6:
                    f9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:1D:C2:C0:8D:10:6F:E6:2F:47:EF:70:32:DE:D2:9D:54:95:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.crl

            X509v3 Authority Key Identifier:
                keyid:68:38:1F:AD:84:E2:AA:7C:59:36:ED:66:0A:17:20:60:1A:AA:CC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:7c:ea:4e:9d:c3:50:07:c6:d7:21:88:f9:40:ee:49:d8:
         b0:46:a2:c9:bf:af:35:90:2e:4b:ff:f2:c5:2d:f7:77:f0:3e:
         89:82:d5:c9:0f:ab:a7:93:f5:38:50:fe:5a:d0:90:af:89:74:
         0c:a9:a1:99:16:e2:8b:9f:df:a8:57:52:0e:58:4d:cd:ba:cd:
         31:dc:7e:c8:7d:0c:6c:fb:0c:6c:ec:ea:f1:7f:16:4e:46:8c:
         83:19:85:71:9a:18:25:09:16:af:94:0d:d4:e7:a1:8b:e7:68:
         b1:f4:aa:af:c6:ab:41:ac:76:46:36:0c:78:fe:61:6a:db:40:
         ee:61:55:5a:d1:1a:5c:b3:2e:be:8e:b6:bf:b8:cc:f4:41:7b:
         3b:25:a1:c6:b6:ba:66:13:3a:8e:18:5b:81:d7:6a:dc:42:05:
         ba:69:e6:02:29:d5:eb:5f:8f:11:79:bf:a9:b5:79:7a:ce:d7:
         58:67:d7:73:a4:d0:ad:e4:ec:b0:80:74:1e:40:87:5b:69:0f:
         13:f1:b6:c5:de:30:d6:54:3b:a9:4f:50:6a:ee:61:68:cf:ed:
         32:cc:cf:02:2a:02:62:0f:eb:2f:83:ee:22:6b:12:e1:02:d8:
         a0:cc:cb:85:42:58:3d:c8:79:1a:d5:ba:90:66:81:33:22:14:
         44:d3:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:15:46 2025 by rpki-client