Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa
File:                     725248f3-6cd4-3191-b686-aae1fe549b6e.roa (raw, json)
Hash identifier:          78NXilrs58c3U8XJCeVI5lrqcFfp8Gd9IrivqtCXIII=
Subject key identifier:   AF:38:80:62:B0:34:93:A2:F6:2C:E6:4C:6D:EE:61:00:5A:4F:4E:3F
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285848705AFD6B14B6100F0471A020
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     53727
IP address blocks:        2602:f982::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:fd:6b:14:b6:10:0f:04:71:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=33b09585-2b26-4341-9ea3-00be66ef38db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:0f:a5:89:ce:51:ca:20:c3:94:a6:6d:14:
                    80:6c:2d:30:21:88:e9:75:6e:68:31:c2:1d:c6:9b:
                    08:5f:c2:0c:65:6a:95:22:cd:0e:2f:a6:b4:3e:5e:
                    c5:c6:9e:2b:c6:4a:d6:08:6c:2e:df:61:5a:bf:d8:
                    45:80:20:53:92:b0:81:4f:d5:14:06:d8:fc:35:09:
                    43:f9:cf:d6:8d:f7:1f:d0:0e:90:70:cd:fb:ac:0d:
                    d0:67:45:b8:86:a2:a7:bc:5c:af:b3:05:d4:c6:4c:
                    7f:c0:ae:ac:ac:58:f2:39:03:51:b0:02:9a:48:7b:
                    6c:ad:c5:bb:58:d8:e6:a1:7b:f3:91:eb:49:3b:46:
                    9e:c7:96:58:a7:5d:fe:ea:b7:35:2e:2c:c1:d1:7e:
                    ac:e2:ab:f5:9d:8c:ea:5d:11:14:13:f4:7d:79:3e:
                    bb:2d:8a:f6:d6:10:0f:d0:20:43:c6:d8:c5:14:bf:
                    00:b4:33:9c:5f:57:a8:2d:b0:67:0d:d9:79:13:23:
                    cf:67:12:85:fe:4e:bb:90:dc:6c:d1:c1:02:7c:18:
                    ae:cd:e8:a1:36:0a:be:66:00:ae:53:9a:fb:6d:4a:
                    f2:9a:8d:b0:b3:d4:1a:f7:76:c7:57:4c:a8:26:ff:
                    82:c8:7b:ce:e8:8d:07:c1:4d:39:7c:d8:e7:b0:dc:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:80:62:B0:34:93:A2:F6:2C:E6:4C:6D:EE:61:00:5A:4F:4E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/725248f3-6cd4-3191-b686-aae1fe549b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:16:e1:31:38:56:24:ed:7a:0c:be:46:ab:e7:71:8d:96:
         70:83:d6:e6:0a:aa:c2:c5:1d:6c:86:1d:19:98:de:94:83:67:
         7e:7e:2c:dd:da:da:90:ae:57:66:27:7e:c0:0a:dd:a4:bb:87:
         24:66:da:4e:8c:80:23:ce:c0:fc:56:c3:d2:4c:2a:2a:ac:29:
         06:d6:44:88:b9:3e:cd:59:d3:18:82:d1:e6:f2:3b:66:c5:01:
         d8:45:7c:2f:da:4e:c6:fc:69:89:48:78:38:cd:ab:92:2a:31:
         7c:9e:df:b5:d2:d5:e4:9c:b0:1a:cf:07:9b:19:78:e2:01:70:
         49:3b:61:3b:38:6d:d9:de:a0:b0:c5:6e:8b:40:02:cd:f0:d5:
         d4:ba:d6:27:a3:08:b2:9f:a0:61:54:90:4d:d3:fd:31:da:0f:
         ee:7e:98:fe:55:f2:17:13:03:d6:e2:c0:0f:35:ab:c1:b9:5d:
         47:d0:30:03:dc:13:cc:bf:d8:ab:05:05:d7:14:b6:ee:9a:d4:
         56:04:dd:a5:0f:8c:46:b8:8b:d5:05:8b:7f:c4:df:18:43:45:
         7b:77:04:ed:0f:17:94:0f:3c:2c:57:c7:19:58:69:bb:75:52:
         63:54:58:3f:4c:03:7f:ef:8a:b2:11:84:39:a8:0d:e9:af:88:
         b9:f1:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:58 2025 by rpki-client