Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa
File:                     7f497e5b-71be-3635-8250-53cfd646e02c.roa (raw, json)
Hash identifier:          nKN/7pWcHpX/oMrSliNDkVUIGit3dMqrTs763JJUFF8=
Subject key identifier:   1E:96:E9:2F:65:02:13:48:67:E5:F7:6C:8F:B5:3A:11:4D:43:10:91
Certificate issuer:       /CN=faa26853-2597-4aa9-8c42-c61cf2081ff6
Certificate serial:       010D0C9F432858490CB1713AFE624B8771B44020
Authority key identifier: 23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     21515
IP address blocks:        2604:9800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:71:3a:fe:62:4b:87:71:b4:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa26853-2597-4aa9-8c42-c61cf2081ff6
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=9be7b6f1-060c-44c5-b04d-92c32f2dbf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:b9:1b:d9:cb:c6:ee:b5:32:cb:37:ca:4c:
                    86:9b:95:09:ba:4e:fe:fe:88:3d:ab:5c:a7:ee:ff:
                    18:3d:dc:db:ce:93:4c:b7:eb:a2:2d:90:87:e0:1d:
                    66:81:9d:88:f1:88:8d:8b:f9:b6:05:a3:09:45:45:
                    16:0e:38:9b:0a:ac:6b:ef:6c:5c:74:ee:5d:b3:74:
                    a5:bb:cb:9f:af:29:00:80:d8:93:24:b8:6a:f8:e6:
                    d4:4b:c6:ac:f4:17:27:57:4a:66:5b:37:02:34:96:
                    29:be:a5:3c:57:22:5e:9b:cc:c6:9a:4e:85:10:b4:
                    72:98:7e:62:db:78:ab:fd:7f:67:98:f2:ab:98:6e:
                    72:65:76:89:75:dc:ad:50:b8:2f:af:4c:6e:c7:5e:
                    4b:5b:3f:fe:c0:91:7b:c6:15:99:53:1e:77:77:c6:
                    06:91:c4:9d:94:b5:dc:64:fd:aa:c9:b7:89:24:bf:
                    cb:96:a7:b2:a3:4e:9d:8a:08:aa:97:1f:79:5e:0c:
                    a0:41:b0:de:f5:87:bb:7b:6d:75:25:1f:f1:37:bb:
                    3c:df:ce:11:f2:b1:38:e0:42:ea:32:71:f0:2f:e0:
                    f0:9e:fb:2e:5f:a3:1f:e5:77:fc:98:04:ff:4a:b0:
                    98:36:80:21:81:c5:b2:86:74:7d:c5:87:5e:7b:67:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:96:E9:2F:65:02:13:48:67:E5:F7:6C:8F:B5:3A:11:4D:43:10:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/7f497e5b-71be-3635-8250-53cfd646e02c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6/faa26853-2597-4aa9-8c42-c61cf2081ff6.crl

            X509v3 Authority Key Identifier:
                keyid:23:DF:F3:38:56:68:8A:EC:76:A7:53:D1:44:56:10:1D:A7:0E:BE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/faa26853-2597-4aa9-8c42-c61cf2081ff6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:d2:5e:68:70:e5:ac:aa:0d:af:b1:8f:51:ba:ac:27:93:
         19:07:bd:9c:65:8f:57:8e:7a:8f:cc:62:75:04:85:7c:ff:34:
         58:ff:3e:b9:5e:49:1b:98:9a:9f:2e:dc:8a:3b:f0:6a:24:32:
         22:6a:a9:55:19:d6:f1:9e:c3:88:ff:b9:7a:4b:96:d6:b8:d3:
         98:2e:1f:8c:90:2a:5f:8f:2d:84:a7:1b:61:b2:30:eb:99:82:
         1e:71:f1:b6:df:d2:d4:0b:78:ad:21:73:30:c3:e6:bd:f2:26:
         2c:1c:89:32:d4:d6:a1:85:b5:d1:d3:6d:34:db:e8:22:43:d2:
         e9:61:dc:3b:fa:03:d2:cb:2b:e6:d9:a7:4b:99:68:c2:1c:5a:
         49:16:cb:f3:cc:76:1a:9a:b2:2e:f9:06:7d:2b:2a:61:c3:37:
         00:09:b7:18:c4:d0:8d:16:0f:68:7a:cc:fa:d3:1d:66:88:0f:
         99:8c:78:42:e9:8e:07:04:da:bf:7f:c2:45:c0:66:f8:bb:a9:
         5c:cc:d9:6b:e7:1b:05:80:8d:cc:a0:4a:ce:69:2a:17:4c:3e:
         25:a0:70:cd:95:a9:79:98:3e:16:e2:9f:dd:13:3d:e9:bb:0b:
         57:af:f8:4b:35:99:60:0a:5c:42:57:ff:2c:ae:93:ee:86:ef:
         2e:48:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:00:57 2025 by rpki-client