Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa
File:                     7a438846-02eb-3614-b230-c1844f37973a.roa (raw, json)
Hash identifier:          Egklzyk1ENrnpZS2rllkv/QdBFfzKgx361YFFm/jAdA=
Subject key identifier:   3D:8F:A6:92:AD:D9:A2:33:3B:15:E5:CA:B1:83:C8:AF:78:C0:46:2D
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F432858488C45C94643719BDDDB709900
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa
Signing time:             Wed 15 Jan 2025 02:00:39 +0000
ROA not before:           Wed 15 Jan 2025 02:00:39 +0000
ROA not after:            Tue 15 Apr 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        2602:f95b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8c:45:c9:46:43:71:9b:dd:db:70:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Jan 15 02:00:39 2025 GMT
            Not After : Apr 15 01:00:39 2025 GMT
        Subject: CN=8e22a483-7bf5-487a-b789-050ad7df057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:5c:a5:7a:35:cb:40:33:7e:b8:a0:35:9e:
                    2e:23:e3:41:64:94:97:a0:ee:e3:93:ed:c1:ec:2a:
                    b9:76:ce:8d:e8:47:33:68:3b:58:52:73:ce:a5:97:
                    92:af:2d:36:ec:2d:63:14:38:e8:df:62:cd:85:a7:
                    e9:08:ca:ed:6a:4e:0d:80:d0:b5:b0:ed:c2:65:e9:
                    ae:73:ff:52:f0:0a:8c:a8:f8:8d:80:5d:39:23:ae:
                    8f:bb:69:b1:36:17:a4:df:e2:1e:a5:4f:5f:47:99:
                    2d:ff:03:49:77:db:29:42:f5:4a:e4:c2:f7:2f:c8:
                    7f:8b:4f:b3:c5:72:24:c2:66:84:52:18:65:93:07:
                    c3:50:a6:34:cf:26:5f:1c:fb:7e:e2:e3:5c:1f:3c:
                    69:b0:85:e5:e6:20:2f:ea:2b:ed:03:66:02:25:d1:
                    17:25:5d:3f:c2:20:63:d0:f8:7c:75:b4:dc:ba:69:
                    43:8c:03:6f:31:b0:64:d1:93:0f:a5:f4:fa:1a:d6:
                    fc:b2:98:5f:1f:8d:e1:62:27:aa:5f:6a:aa:c3:fc:
                    26:4a:7f:b2:a0:67:40:35:66:6e:25:94:f6:96:40:
                    91:14:71:c3:2a:c4:17:65:c2:49:61:72:81:04:30:
                    17:ce:84:5a:59:51:78:3e:b6:57:ba:c2:0e:69:77:
                    c3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8F:A6:92:AD:D9:A2:33:3B:15:E5:CA:B1:83:C8:AF:78:C0:46:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7a438846-02eb-3614-b230-c1844f37973a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:49:d0:3f:5a:2e:6e:3d:a7:f3:77:6b:09:c6:6a:79:2e:df:
         b3:70:e7:75:29:bd:18:c9:a5:98:0e:54:ff:ee:94:b2:85:5a:
         a8:4c:20:67:5d:c6:92:63:ca:de:19:8b:2c:c0:42:8e:e6:98:
         d4:9f:90:ef:91:7c:c1:bd:1c:81:c9:8c:bc:d1:11:07:28:1d:
         c0:0a:a8:ae:7e:74:62:3e:26:8a:f6:95:c8:d7:c4:de:ff:93:
         4d:dd:db:a7:4d:85:89:4c:39:77:82:bd:47:6c:ab:72:58:32:
         ff:d1:99:a3:96:32:d0:1b:00:94:f4:ea:e0:80:7b:f1:d7:ff:
         de:59:6d:1c:07:cf:7e:57:37:0b:fd:bd:53:0c:19:a2:92:fd:
         a8:76:69:8e:6d:c4:77:b6:ae:9b:9a:98:1a:83:3c:32:c2:0e:
         84:62:ea:a2:dd:90:0b:69:05:be:5b:24:27:63:a6:0b:bd:04:
         6f:5c:3a:20:ca:8d:47:d8:95:e9:55:8a:6b:a9:0b:8a:10:d8:
         5b:3e:36:56:80:48:15:c0:63:63:bd:07:19:0c:d7:cc:ec:4f:
         21:83:c3:db:25:c8:15:16:7f:e3:a8:52:d9:7b:00:e4:7f:b0:
         82:f1:69:64:8a:6a:e2:ec:18:f8:0b:f9:58:95:15:5a:ff:77:
         2e:f0:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:00 2025 by rpki-client