Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bca51652-def3-3430-a04f-0b8e86e23301.roa
File:                     bca51652-def3-3430-a04f-0b8e86e23301.roa (raw, json)
Hash identifier:          Fcifnek1RxnYjeT42cVT+f5MefcmIMw+ZhpYhtCq13A=
Subject key identifier:   B1:8B:63:5F:A9:FA:78:94:C3:AF:DB:6F:3C:29:49:16:3D:AD:EA:D0
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285848E26DA5177FC2F34528BAF540
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bca51652-def3-3430-a04f-0b8e86e23301.roa
Signing time:             Fri 14 Feb 2025 22:40:30 +0000
ROA not before:           Fri 14 Feb 2025 22:40:30 +0000
ROA not after:            Thu 15 May 2025 21:40:30 +0000
asID:                     399970
IP address blocks:        2602:fc3b:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:6d:a5:17:7f:c2:f3:45:28:ba:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Feb 14 22:40:30 2025 GMT
            Not After : May 15 21:40:30 2025 GMT
        Subject: CN=326594cd-92f8-4919-a691-87f48b6978fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e9:ea:3e:a4:f2:c2:59:eb:24:aa:13:ae:55:
                    d6:12:23:8d:24:57:4f:3a:8b:6f:85:99:5e:39:99:
                    cf:f6:0a:a0:a7:9f:92:19:f6:fd:87:5a:62:0a:29:
                    e8:dd:60:bc:80:10:42:73:5b:8f:d0:53:66:fa:6a:
                    05:42:a6:3a:16:12:68:c1:12:e0:ca:5e:33:92:8c:
                    5b:09:76:10:06:82:12:32:36:d5:5e:0f:ae:b5:0f:
                    68:b5:b8:60:68:fa:1b:bf:1d:34:89:5b:75:92:ef:
                    a9:34:e7:e9:c8:c1:f4:c5:2f:2c:8d:08:88:27:01:
                    c8:c5:4e:67:c1:e2:5a:2e:44:81:d4:2f:32:b0:59:
                    03:03:c7:3c:b4:39:1c:68:3a:8d:bf:28:0c:06:8b:
                    cf:a6:0a:ff:52:7b:79:ab:26:ed:ab:bc:52:1c:ca:
                    fe:4b:b9:9d:bf:fc:84:60:35:07:a6:df:c6:74:56:
                    fd:4b:c8:72:04:4a:60:9a:1e:5c:a2:7e:8a:7d:49:
                    de:41:76:83:b1:93:4a:6f:02:55:ac:47:dd:99:11:
                    18:a3:14:2f:84:f1:31:88:35:24:bd:be:25:7e:6f:
                    ba:07:b0:80:e9:26:b5:af:8d:75:18:2b:dd:ad:0e:
                    e1:00:8d:a9:7c:11:f5:16:58:88:38:b3:16:c5:c2:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:63:5F:A9:FA:78:94:C3:AF:DB:6F:3C:29:49:16:3D:AD:EA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bca51652-def3-3430-a04f-0b8e86e23301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:30:d0:b9:e9:bb:f0:a0:a9:bc:f7:32:7d:87:2d:d4:dc:db:
         04:1e:9f:eb:db:e2:32:71:12:95:19:90:66:12:19:0b:08:bf:
         ad:bf:99:a3:d9:d0:8e:26:96:64:54:f9:b1:72:f6:b5:eb:92:
         02:ce:1f:df:cc:ac:3c:c8:12:fe:bc:9f:fa:33:72:4a:19:4d:
         94:0a:8e:d8:b9:3c:13:13:0d:a2:47:2e:52:35:3a:b9:1d:20:
         22:78:ad:27:a2:45:11:60:2b:49:f6:cd:8a:49:ea:7b:62:e5:
         b9:c2:e0:8b:5f:a1:72:89:9c:f8:53:24:b9:49:69:8c:37:11:
         9e:8e:e7:51:41:30:e6:82:e4:ca:0e:3a:a3:3f:69:8f:2f:33:
         e2:82:81:0a:77:8e:c4:46:a1:b9:e6:b8:01:1d:02:4f:70:bc:
         61:2c:8f:7e:f7:c4:75:e7:5b:62:56:8d:88:cc:44:5a:c0:ad:
         29:30:69:ff:db:96:da:ae:47:b9:94:e4:2c:59:df:39:7f:2b:
         69:3d:03:37:32:78:99:f3:6a:07:b3:18:bd:7e:0c:09:b2:70:
         b5:a5:3c:c0:62:f9:f0:4a:5c:e5:9a:6d:f6:99:6e:79:b8:9b:
         b0:ce:23:9c:9a:ed:3c:ce:9f:69:42:65:de:57:ca:b7:da:86:
         ea:b0:d2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:43 2025 by rpki-client