Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa
File:                     1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa (raw, json)
Hash identifier:          sAa2iUK9yNhW2I/qUs89OmEskEwu51IBboU+5nSKVXY=
Subject key identifier:   32:25:25:01:D4:39:D8:CF:0F:4D:27:2C:94:C3:A2:1E:B6:64:37:BE
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F432858495C2440D3E8EAC5A05E539C40
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     52423
IP address blocks:        2604:c980:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:40:d3:e8:ea:c5:a0:5e:53:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=817fcfad-5857-45ff-854d-a365284d399e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:1e:e2:05:f3:8b:6c:a5:2d:44:2a:a2:1d:
                    e1:0c:d9:fd:56:4c:76:e8:2f:24:d7:ba:50:fc:20:
                    a2:9a:39:f9:f0:31:04:bf:ca:93:4f:a2:92:5f:cb:
                    ef:58:f8:e0:5a:e8:f8:2e:85:2b:99:45:e6:2d:12:
                    2b:32:c3:ba:cf:77:e5:fa:11:fa:7b:5c:d3:56:cc:
                    aa:a2:8b:23:ad:04:6d:bc:1d:09:69:c7:b7:a6:9d:
                    a1:52:b5:09:99:82:ac:00:7e:1f:ce:8b:37:d4:72:
                    de:d0:30:a2:eb:0c:8b:da:1c:a5:21:45:9f:12:a0:
                    7d:3b:f8:c4:85:7c:e2:47:99:90:7e:ca:14:03:b1:
                    d1:3f:a4:c2:59:62:1a:58:fb:78:d2:8f:8e:35:ee:
                    07:4e:84:81:86:e6:00:d1:40:47:6a:3d:d3:76:77:
                    5f:f8:1a:62:98:08:db:4d:aa:ac:45:f8:2d:24:43:
                    c1:c5:5d:cc:d0:04:68:c2:40:cb:1e:4c:69:ab:85:
                    29:6c:9e:1e:60:ba:75:fb:3a:68:c7:07:02:e2:b4:
                    ce:99:4d:61:67:39:2e:6a:97:ea:d6:07:df:f4:46:
                    85:7d:aa:db:52:7a:03:02:0e:48:6c:3a:bc:4c:73:
                    fd:d7:be:cc:51:69:89:22:52:0e:8a:51:2b:fe:93:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:25:25:01:D4:39:D8:CF:0F:4D:27:2C:94:C3:A2:1E:B6:64:37:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1f3baa01-d519-3749-ad08-f9a7023cd9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:1200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:30:9a:1d:6d:51:93:7f:96:bd:14:c5:b5:e1:38:e1:8f:8d:
         bb:61:5c:80:db:fa:1f:31:58:71:0e:fa:76:ff:1e:3f:88:ba:
         6b:ba:c5:a6:2c:83:5b:6e:c4:53:be:0a:0f:28:75:1d:9e:33:
         77:4c:7d:a8:89:cb:cc:8f:06:48:e7:8e:06:de:9f:d5:9d:60:
         10:04:90:d0:09:ba:7f:3c:69:b2:f7:80:a3:a0:fb:2d:b9:8d:
         69:8b:ea:fe:56:11:c4:a1:da:a8:8d:8f:57:11:f0:05:1a:40:
         b8:1c:25:cd:60:45:19:9b:14:d8:40:96:fe:c0:48:f1:42:85:
         b2:6d:61:db:93:9c:48:ff:85:e8:cb:3e:b0:98:7c:8a:34:cd:
         41:b3:30:3b:16:11:d6:f0:99:f8:55:54:01:ca:b5:23:38:0f:
         a0:8f:75:98:e6:e5:53:8a:4d:9b:ee:1d:9f:70:a0:df:26:ad:
         a1:59:18:ff:55:b1:bc:13:2f:03:e6:fd:f9:03:e1:e1:e4:be:
         e4:2b:e5:9f:91:05:fa:63:92:8e:00:0a:4f:71:18:3f:4f:be:
         fc:b1:5d:94:21:19:5f:79:c7:c0:8e:27:ee:13:83:b1:48:55:
         8a:cf:36:13:fb:40:76:2e:4f:22:04:f1:61:2b:09:d7:2e:98:
         e8:4a:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:32 2025 by rpki-client