Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
File:                     ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa (raw, json)
Hash identifier:          ZjEu+tL/iJr+JaN9isXiESk3ngMmBxm92iRIWFbVbBQ=
Subject key identifier:   8E:C7:FA:38:E5:5F:81:2A:7D:9E:2F:B2:EB:2A:85:90:D0:9D:03:29
Certificate issuer:       /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Certificate serial:       010D0C9F4328584949FE902E83DB3236F97E2200
Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     992
IP address blocks:        2602:810:5001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:90:2e:83:db:32:36:f9:7e:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=78d7cb3f-1e5c-41a3-af6d-575db5467529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:e4:2c:58:cb:12:14:f8:2d:43:a6:18:62:
                    03:f5:8b:d7:69:99:4b:e1:97:1f:2b:65:f1:08:d6:
                    88:ff:cf:98:82:42:80:c6:fb:b2:05:9f:76:75:17:
                    79:55:a0:12:31:9e:ee:ce:a0:03:46:33:fe:be:0d:
                    83:bf:84:a4:4c:b8:64:ba:68:9d:db:ed:5e:ac:36:
                    22:a5:b7:a6:9c:1c:e6:a2:41:45:2d:f4:ae:93:4f:
                    77:04:de:6c:12:8c:de:72:2a:1c:25:2b:22:d6:06:
                    00:ff:4d:e2:54:b9:1d:5b:84:bf:ee:a4:aa:c9:34:
                    df:24:87:d4:ce:39:12:66:f4:b5:d0:e4:6e:e9:1f:
                    fc:f1:8e:ce:1a:0b:de:7e:90:75:71:a7:dd:08:74:
                    a6:94:ba:ed:c7:91:78:33:1c:f0:ea:a2:a6:2a:50:
                    8b:ef:aa:a7:81:76:1f:df:9f:b0:df:13:a3:21:37:
                    5c:b5:e4:83:30:55:4b:39:e8:fe:69:04:c2:f3:b1:
                    7a:83:27:83:a7:27:7d:25:f9:cc:0e:bb:cf:69:81:
                    a8:9f:02:c0:c7:3a:a9:25:ec:b8:25:f5:75:8f:2f:
                    7f:90:cd:a0:06:48:d9:e4:d7:c9:f5:4d:e0:ca:41:
                    45:d4:96:5e:67:21:c9:0c:d9:b1:25:ee:39:27:bb:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C7:FA:38:E5:5F:81:2A:7D:9E:2F:B2:EB:2A:85:90:D0:9D:03:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl

            X509v3 Authority Key Identifier:
                keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:90:0d:d7:88:df:73:21:b3:50:6d:7d:d1:ff:ce:12:e4:
         a2:b2:e7:50:24:88:d2:d1:94:56:ff:c1:d9:6e:62:20:4e:2f:
         91:61:67:5c:cb:f6:45:67:04:00:62:fa:27:6e:24:26:c8:3a:
         05:04:0e:ee:27:e9:2b:2b:b0:25:46:09:b8:e1:5a:e3:31:ad:
         84:a9:21:32:31:69:60:5b:a3:db:df:a4:d6:a9:d7:42:5c:0b:
         22:57:13:f7:14:bf:8d:78:f2:de:c4:2a:a7:d0:d1:44:9b:33:
         99:74:92:4c:17:09:60:79:27:74:5a:b6:35:be:5a:9c:a9:15:
         5a:f4:5c:2c:0f:bb:ac:72:bb:69:af:be:73:4f:af:4d:9d:52:
         6b:c9:64:c7:2b:ec:90:e4:22:76:23:68:0c:7e:a7:9f:dd:7e:
         d2:fe:78:e9:6c:ef:aa:de:a5:d4:f4:24:8c:74:67:ce:7d:ed:
         39:73:6e:b4:53:0d:31:c8:a3:4f:32:66:e0:35:87:54:cd:8a:
         4c:9e:86:cf:d3:ac:76:85:27:c8:7f:bc:b6:ac:2e:91:2c:8c:
         9a:6d:b0:8d:c7:e6:ae:a8:c9:37:9b:6e:4b:14:8c:be:d2:86:
         a2:8d:7c:b2:1f:7d:af:3b:39:bf:66:b9:65:65:1a:4f:ae:7c:
         0d:1e:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:59 2025 by rpki-client