Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa
File:                     6524e4cb-e7d2-358d-8939-7256c865ab46.roa (raw, json)
Hash identifier:          SJbtV1SpMzFIbxtIgIhgmGFf8zuN+OuYtPEU/KAMs9k=
Subject key identifier:   FE:75:C8:C0:43:E6:C1:3F:BE:E6:B4:39:18:CF:19:9A:7D:3D:7A:EC
Certificate issuer:       /CN=f7fcbba1-dc19-4591-997e-a4c5c0774c67
Certificate serial:       010D0C9F432858490F7BFF5DA053726424DF04C0
Authority key identifier: 2A:FC:4F:77:6B:D9:E7:05:D8:7F:CF:CF:76:97:51:7D:F8:A0:9F:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        2620:2b:a00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/f7fcbba1-dc19-4591-997e-a4c5c0774c67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/f7fcbba1-dc19-4591-997e-a4c5c0774c67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:ff:5d:a0:53:72:64:24:df:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fcbba1-dc19-4591-997e-a4c5c0774c67
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=bef6bf95-df43-4af5-b056-84d8dad7a839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:76:68:86:c5:f5:ce:d9:85:df:ed:65:85:f3:
                    09:b7:8f:26:53:44:a0:25:d6:3d:81:eb:11:46:23:
                    82:5b:8e:ea:0f:f7:f8:be:69:b8:45:fd:d9:34:54:
                    0a:12:6e:86:c5:c7:45:e5:31:dc:96:cf:d5:f4:89:
                    3d:6f:80:b8:14:18:0c:30:c1:83:24:61:8d:60:6b:
                    c3:5f:0f:90:d1:e6:ab:0e:c6:ac:5e:7b:10:1a:8a:
                    f3:7d:36:d7:25:a0:92:14:78:47:36:9b:c5:e5:6c:
                    7f:d3:7e:36:f5:cd:d5:fa:bd:0e:22:23:1b:58:05:
                    de:fc:5c:05:55:36:ec:ee:0f:34:6d:57:3d:fe:13:
                    13:7c:35:bd:2f:fb:83:0c:90:55:02:bc:66:76:19:
                    c6:a5:fa:17:f9:58:2f:43:6a:e1:77:64:46:11:bd:
                    80:17:9f:b5:44:a4:cb:ea:92:ad:64:65:8b:3f:0e:
                    fc:3b:5c:01:40:14:17:5c:23:a1:cc:c8:67:72:63:
                    e2:87:e5:32:8c:28:a0:c2:df:ef:70:55:b8:fa:8b:
                    ee:cc:70:9a:e7:cb:93:5d:72:1b:4c:9e:44:6a:5f:
                    e3:12:c7:14:0b:54:a4:de:38:1c:32:d1:99:7a:14:
                    7a:0a:4e:5e:77:8f:b1:6f:0e:cd:c3:25:63:fe:21:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:75:C8:C0:43:E6:C1:3F:BE:E6:B4:39:18:CF:19:9A:7D:3D:7A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/6524e4cb-e7d2-358d-8939-7256c865ab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67/f7fcbba1-dc19-4591-997e-a4c5c0774c67.crl

            X509v3 Authority Key Identifier:
                keyid:2A:FC:4F:77:6B:D9:E7:05:D8:7F:CF:CF:76:97:51:7D:F8:A0:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7fcbba1-dc19-4591-997e-a4c5c0774c67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2b:a00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:41:ed:dc:8b:25:b4:9b:b0:22:59:37:86:b2:d2:43:e7:
         0d:a3:d4:35:b8:ba:cd:5f:fa:e7:80:32:d2:c0:ec:b5:ae:df:
         9a:ce:be:86:50:4e:bf:e1:24:90:2a:b2:69:7c:2d:44:12:8d:
         7e:72:63:64:bf:37:73:f5:af:5a:f4:17:c7:d9:f6:05:a4:ac:
         16:45:7b:99:37:05:a4:57:cb:6b:07:1c:82:6f:b7:dc:d5:f7:
         e6:00:6a:7d:a0:34:d1:63:d5:7d:c2:7e:2d:3c:69:de:2e:1c:
         d0:c1:16:71:c4:56:13:3f:e9:4c:a3:6b:05:62:9e:50:12:e2:
         e6:62:f6:1c:1e:87:be:43:2f:a1:9d:eb:f0:28:27:39:78:d5:
         67:3c:07:23:74:22:64:bd:5d:b4:e4:4a:e4:54:26:21:75:11:
         7f:b1:46:56:d8:7d:ad:17:56:fc:b9:3e:5a:de:cb:62:f7:96:
         f4:b8:76:a8:b4:40:7c:96:83:c9:76:5a:de:1a:ac:dc:32:d3:
         6d:77:cf:7d:bc:74:ea:8e:94:72:a6:46:2a:db:18:32:6c:c0:
         32:74:42:38:a8:8d:0e:21:45:1f:2c:18:2b:5a:4d:ab:0e:0d:
         85:c2:89:21:9c:b0:b4:d1:dd:9a:75:a2:eb:83:83:49:5c:9d:
         fc:fd:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:39 2025 by rpki-client