Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
File:                     57424064-6a27-30a2-ad95-4bff0beaa8c5.roa (raw, json)
Hash identifier:          BnwD2O6IMa+RlEGHN8fnbbIJ1J1wRLiQ6BBrngn1v58=
Subject key identifier:   32:6F:AF:A1:06:A3:53:8D:D7:B7:C8:E5:80:5A:CF:3B:48:F0:C8:2D
Certificate issuer:       /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial:       010D0C9F432858492CB20C994B93F81F6F625E80
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     10439
IP address blocks:        2607:ff10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:0c:99:4b:93:f8:1f:6f:62:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=25c11bd4-012d-4e47-8173-01702536d090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:97:51:07:b1:81:7b:7f:3f:05:9f:db:f5:
                    82:bc:d6:73:af:6e:2a:74:2c:92:46:38:1b:42:89:
                    f4:4a:f1:92:76:ae:01:00:62:28:90:5f:d2:93:c6:
                    0b:46:78:44:21:59:0d:d9:09:3c:99:a2:8b:03:67:
                    68:9d:ab:75:8e:74:b6:01:98:ba:61:ef:a4:dc:6e:
                    87:55:50:82:0c:5a:f4:1e:f8:6c:cd:d6:56:cd:65:
                    f0:a6:17:ef:00:93:2c:ce:97:03:36:1e:43:79:90:
                    be:69:6c:8a:49:ff:a8:0b:2e:7d:af:ee:fa:32:e5:
                    f1:e4:55:99:7c:cf:f8:89:02:ef:1e:63:55:53:80:
                    5d:4b:2b:e7:fe:b7:10:cc:fd:ec:08:72:2a:04:47:
                    8c:6b:b6:a3:35:df:bc:67:12:f3:a2:0c:8e:43:e8:
                    92:89:39:fe:30:0f:4f:73:36:ee:f8:16:f5:df:56:
                    97:d1:2d:fa:f0:f8:b2:c7:b3:60:ce:5e:26:b0:ea:
                    88:ba:a5:b6:8c:d8:d8:06:48:db:3f:84:b2:f1:95:
                    7e:f3:75:3d:ed:80:71:40:74:2c:0f:4d:76:97:82:
                    95:82:b5:9e:5f:b9:32:fe:8e:49:e8:2b:59:73:e8:
                    47:d6:e1:9a:7b:b7:3f:38:3e:b9:d5:86:03:a7:e7:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:AF:A1:06:A3:53:8D:D7:B7:C8:E5:80:5A:CF:3B:48:F0:C8:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl

            X509v3 Authority Key Identifier:
                keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:42:ef:ed:d2:62:ef:4b:14:16:72:ab:4b:62:85:ae:bb:
         97:61:4a:0c:47:c1:55:71:bf:d9:9e:f5:b7:fa:d6:00:7d:cf:
         ed:46:fc:3f:e0:b6:de:4f:e1:54:c3:0e:2b:2d:77:24:b5:b6:
         91:de:44:92:a6:14:7d:3f:81:fd:f7:b3:46:61:58:91:26:8d:
         60:d8:f2:60:50:e5:48:eb:12:54:9f:1f:e1:ed:9e:d6:c8:4a:
         b0:a0:95:34:f4:94:ca:c2:05:71:86:15:94:09:d7:8f:5b:a7:
         ce:0f:69:f6:20:4b:0c:7e:68:44:22:0e:75:39:bc:ad:c7:56:
         84:2d:73:4c:81:5a:31:1b:24:5d:8c:e3:e5:57:28:1d:1e:c5:
         57:33:f3:49:bb:c9:cd:4a:15:46:b7:7c:38:5e:b1:92:15:1c:
         ce:83:a1:df:a1:5f:04:82:75:72:5a:08:ea:e0:9c:90:62:89:
         00:21:f6:86:86:60:a5:de:97:b7:be:ad:26:3f:24:01:66:5b:
         14:c1:8c:9b:3f:ea:0e:e6:2a:19:e6:16:da:e2:2c:14:25:11:
         47:51:9c:34:81:9f:f2:6b:75:3a:95:c3:61:b0:98:75:2d:d7:
         f0:18:33:f4:c6:43:2f:a4:42:68:6a:4e:93:fc:d2:4e:d5:04:
         99:ff:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:39 2025 by rpki-client