Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
File:                     985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa (raw, json)
Hash identifier:          5cK7xw2lxEWnW6/IdBQe4t65AQEdpoPDVQEDT9nkzWw=
Subject key identifier:   20:34:82:D7:E6:CE:4F:9D:80:55:6C:E7:78:0F:87:87:58:84:C9:AB
Certificate issuer:       /CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
Certificate serial:       010D0C9F4328584863CB0EEACB79B7A1834D3BC0
Authority key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa
Signing time:             Tue 31 Dec 2024 14:00:53 +0000
ROA not before:           Tue 31 Dec 2024 14:00:53 +0000
ROA not after:            Mon 31 Mar 2025 13:00:53 +0000
asID:                     54816
IP address blocks:        2607:67c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:63:cb:0e:ea:cb:79:b7:a1:83:4d:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11
        Validity
            Not Before: Dec 31 14:00:53 2024 GMT
            Not After : Mar 31 13:00:53 2025 GMT
        Subject: CN=5d4912ec-4f04-4ac9-aa49-59b3d566bbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:9e:b5:43:80:64:3f:26:94:6f:4a:49:0c:
                    9b:25:78:b2:e3:66:6b:98:28:39:46:d4:99:8a:88:
                    f3:da:3b:9e:6a:39:c2:90:09:17:47:6d:2d:96:ed:
                    85:cb:a6:2e:a2:cf:65:cb:57:45:ec:31:40:3b:4c:
                    f7:14:62:36:d5:b3:0e:7b:0f:a8:c5:3d:29:be:dd:
                    ff:a8:6a:2e:b9:c1:7c:c7:9f:3a:7f:55:67:8a:3c:
                    c5:d2:c5:5e:1b:12:24:fc:9d:db:77:98:34:37:01:
                    2f:f8:c7:ca:89:09:ae:a5:e1:b0:d6:d7:22:a4:7d:
                    9e:cd:33:1e:9b:1a:5a:29:71:f3:00:82:95:f3:1c:
                    da:15:fc:e1:c9:af:cc:11:e6:b4:e0:fc:8d:92:15:
                    ed:6e:c2:3d:1d:cb:11:a4:9f:72:db:78:44:b0:42:
                    2d:f7:dc:7b:04:71:73:f2:bc:b9:e1:e5:69:66:ec:
                    ae:23:e9:bf:e5:67:cb:6c:06:b6:7c:d6:56:59:d6:
                    37:59:de:54:fa:2e:4d:41:2e:58:2d:ab:bf:2b:ec:
                    53:8a:a6:75:fc:16:6e:75:11:f5:c5:e4:b0:09:68:
                    60:a3:3a:c9:14:85:21:d3:d9:db:21:0a:89:58:6c:
                    1b:3f:85:87:76:ed:23:30:29:ab:76:a4:69:65:d5:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:34:82:D7:E6:CE:4F:9D:80:55:6C:E7:78:0F:87:87:58:84:C9:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/985aa5a3-7bcb-3a8f-9e50-92845c0589dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:67c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:44:47:ef:59:87:84:0b:38:5a:d1:d0:5a:f2:6e:da:48:c1:
         2a:8c:4a:0d:45:a6:6d:20:aa:53:90:86:7a:be:43:50:a1:60:
         d9:3d:9c:40:c1:f9:ec:92:0d:7a:1f:07:73:8c:7d:69:d3:37:
         de:eb:78:a0:5e:f6:a1:50:55:10:3f:17:06:71:5b:d9:5f:d0:
         4c:11:1d:29:4d:17:ae:7c:ac:9f:11:7a:4d:ed:99:ca:e0:6a:
         0a:6a:c2:b3:f0:ac:9d:a8:86:30:10:09:be:dd:a3:fa:d2:79:
         94:17:de:94:68:a0:4e:81:89:f1:46:53:06:a8:c4:23:a3:a7:
         9f:f2:f7:d8:b8:ed:10:1f:cd:3f:3d:6f:b2:39:7d:14:69:90:
         0a:3e:e4:ab:45:d8:e6:60:02:ea:5d:26:ef:d2:e5:33:3b:9e:
         b3:69:e1:35:4e:ff:96:5d:f0:04:93:76:5b:28:65:c6:d5:65:
         3b:74:59:1c:83:ba:de:5b:fd:c5:0c:80:ae:11:7b:1e:d1:1e:
         c0:0f:94:75:9d:cb:7f:de:78:6e:7f:d7:49:3c:56:b4:95:bf:
         73:f2:c1:2f:10:82:39:dc:8e:e1:bd:d3:a4:39:f9:b7:f1:4e:
         2f:e7:c0:e8:e8:2d:d1:82:10:ad:80:38:25:78:1b:20:f3:7e:
         b8:bf:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:08 2025 by rpki-client