Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
File:                     87913fab-7922-3eca-b92e-6a5ca4d492bd.roa (raw, json)
Hash identifier:          F0v3aoUjH6R4FwRwfm32QuZ8p28kEQQwJ3tR+F9dgeU=
Subject key identifier:   30:2C:5D:49:DB:38:45:6B:5F:6C:B0:1D:B3:5E:E2:A9:7B:CF:C2:17
Certificate issuer:       /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
Certificate serial:       010D0C9F4328584878BAFF647C8C896C2A614E80
Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     400930
IP address blocks:        2602:f975::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:ba:ff:64:7c:8c:89:6c:2a:61:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=ee28f1f3-e754-492d-a226-47f509f9d13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:1b:1a:12:8e:c1:8f:64:2e:af:05:90:1f:
                    38:05:99:f5:3c:bc:54:2b:44:0e:cc:eb:0e:77:20:
                    b8:11:e7:16:f5:8d:5f:c6:11:73:be:7c:ce:02:f8:
                    78:95:e9:25:78:e3:b3:85:e4:82:5b:61:13:08:39:
                    1d:88:a1:89:b9:ec:54:a5:2e:f2:45:aa:68:31:a6:
                    9a:08:80:22:45:f5:5a:d4:41:58:98:6d:e2:de:c6:
                    f5:90:1c:1c:b7:06:af:a6:21:a5:cc:1d:2a:d4:11:
                    bf:e2:a8:6d:d1:77:47:35:c9:7a:87:8b:3b:53:1f:
                    3c:db:c4:dc:1d:e5:3c:c0:26:77:50:a2:27:60:b6:
                    54:3f:4d:82:8e:21:dc:fa:44:de:1a:ad:13:63:15:
                    24:36:19:f8:9c:62:9d:71:86:e6:cc:b9:3d:14:71:
                    e0:06:d7:fa:77:2f:62:9e:fb:72:3c:70:5e:ff:81:
                    89:ed:89:7c:c1:a8:86:00:f8:9c:f7:4d:fa:d5:97:
                    ff:7e:69:b4:c3:88:81:4e:e0:6f:93:1e:6c:fd:02:
                    cd:79:8c:c1:5a:7e:47:97:72:0a:d5:72:f7:9f:58:
                    ca:ef:69:b1:b1:ed:a6:aa:87:d3:ef:f2:71:13:42:
                    f0:ee:d8:f8:44:00:70:c6:c0:c4:bb:50:42:70:0f:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2C:5D:49:DB:38:45:6B:5F:6C:B0:1D:B3:5E:E2:A9:7B:CF:C2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/87913fab-7922-3eca-b92e-6a5ca4d492bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl

            X509v3 Authority Key Identifier:
                keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f975::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:f4:e3:23:91:4c:1d:a7:2a:2e:26:fd:66:12:ed:ee:24:
         0e:6e:29:13:cc:2f:5c:c7:4a:92:52:8e:c5:21:99:76:96:dd:
         07:bb:e2:6f:1f:08:de:fb:21:ea:04:e1:e4:38:94:c5:8d:11:
         db:ea:4a:63:24:be:43:fb:d6:25:fa:bb:b3:83:43:ef:c6:27:
         f6:91:a1:09:c0:c5:eb:71:10:2f:c3:25:c7:f0:84:4b:e4:fd:
         48:85:21:bd:13:f7:18:38:c2:58:b9:54:29:f8:98:db:da:e3:
         81:42:64:2a:01:a9:00:d3:1f:de:81:58:96:4f:10:60:0d:6a:
         65:75:42:ad:82:bd:6f:ff:62:25:f4:c9:1b:27:9e:95:de:cc:
         3b:7f:26:3b:56:98:1c:ae:5d:53:37:49:6d:0a:cc:69:0b:dd:
         e4:77:18:a8:4f:cd:38:6a:c5:b4:e6:8a:a5:f6:7b:e1:67:fb:
         09:b1:8d:e5:fd:d9:1a:cd:d5:76:0f:a4:cf:30:81:5f:79:32:
         69:05:67:ef:a7:1e:fc:79:6b:dd:05:14:36:32:95:be:06:d5:
         4b:b2:df:99:35:3f:1a:fc:6b:56:ff:77:d1:c5:5d:54:95:3c:
         a2:07:60:39:78:80:17:fd:3e:2b:67:27:95:a5:8c:9a:6e:1d:
         31:00:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:44 2025 by rpki-client