Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
File:                     c4518de9-d056-34ce-80de-4fe9f545eb73.roa (raw, json)
Hash identifier:          kqTROBIq7YRIA9yuZsIAhbizxNhfpIR0g5diE4spjAs=
Subject key identifier:   5F:1B:50:5F:97:7E:3C:31:B7:F6:E8:46:43:91:CA:B6:90:0E:42:8D
Certificate issuer:       /CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
Certificate serial:       010D0C9F43285848F926AD68B9E0AA508A4DB5C0
Authority key identifier: 51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     3152
IP address blocks:        2620:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ad:68:b9:e0:aa:50:8a:4d:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c52ab04-c13c-4ddd-a3df-fcbbbb795104
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ffc7ffb1-fa82-4be2-ad3a-9a572967ae64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:e5:51:95:29:53:0b:7a:85:db:36:e3:23:
                    24:3e:98:19:58:cb:ee:b6:38:66:b1:b8:02:3f:12:
                    6a:7b:6e:15:92:93:a2:be:af:4f:e7:03:9b:3d:54:
                    53:5f:f2:a6:d4:b3:77:a2:ab:5a:b6:34:64:04:ef:
                    d6:fe:30:f6:9e:22:d8:50:4a:b3:71:04:5b:b7:35:
                    9e:6f:30:ba:aa:05:bb:1e:8f:73:03:fc:6b:8b:0d:
                    66:f2:66:e8:7c:fb:69:9b:6e:cc:83:5e:eb:a4:a2:
                    ff:5b:cb:ba:fd:c2:56:f7:67:b5:2a:30:0e:72:f1:
                    73:1f:f4:6f:f1:e5:6e:16:85:de:d7:ff:5d:0d:88:
                    75:91:12:c7:31:62:08:00:c2:90:6d:2a:a8:b2:51:
                    cb:d1:1b:49:7d:a0:06:1c:a2:98:bc:26:5e:cd:bc:
                    39:4d:e2:58:74:ce:11:b5:7c:c9:7d:fa:48:bb:fe:
                    0c:59:7f:db:5b:ad:11:1c:b8:d1:2c:7d:0d:39:ed:
                    98:15:29:fe:39:c5:0f:35:7c:38:35:9c:53:ac:56:
                    a3:29:6f:4b:6b:63:43:d5:e9:08:1d:01:1c:49:9c:
                    97:2d:1c:d8:76:c3:3e:49:3f:be:ec:e8:f9:df:2b:
                    fa:6f:8b:af:a7:1d:61:69:2c:c6:ee:ff:80:91:8f:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:50:5F:97:7E:3C:31:B7:F6:E8:46:43:91:CA:B6:90:0E:42:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/c4518de9-d056-34ce-80de-4fe9f545eb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.crl

            X509v3 Authority Key Identifier:
                keyid:51:96:56:40:5F:E7:45:16:18:10:8F:9B:76:64:A0:6A:44:69:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c52ab04-c13c-4ddd-a3df-fcbbbb795104.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:88:96:a9:84:00:da:f8:c9:08:58:97:af:cd:39:97:80:
         e7:df:60:0e:03:3e:7a:46:8a:0e:ea:bb:23:99:ea:f3:e1:26:
         98:0e:2e:44:08:b0:15:49:f8:99:57:bf:b3:ad:84:26:03:47:
         1d:85:ef:d2:cd:00:e6:38:35:48:85:d4:07:b3:10:dc:a2:1a:
         58:a9:b5:40:93:9e:6d:4a:81:05:8a:6b:02:73:6f:8b:0b:0c:
         87:26:95:be:74:94:f0:5a:79:38:81:5b:b1:3f:bc:00:7b:79:
         f2:c8:ac:49:1d:ab:28:d3:80:38:3d:88:70:49:4e:67:25:8a:
         9f:11:de:22:eb:a6:fc:04:b8:04:86:87:d3:74:fa:f1:ff:42:
         c9:4b:1c:5a:b5:24:2c:0b:3d:fd:3f:f3:0c:e2:d8:ec:fd:7f:
         13:8e:1e:28:dc:98:d7:54:cf:68:76:33:11:e1:af:cb:8e:48:
         bb:ab:e6:8e:13:0d:97:83:33:fd:dc:fe:9a:e8:7b:76:3d:fa:
         cc:66:b6:c4:e9:52:f3:35:bd:23:4e:57:42:71:0f:75:f8:18:
         af:59:44:b4:15:38:82:d8:b9:e4:35:0a:3d:be:f1:f7:00:0c:
         5b:24:20:a5:00:c9:7d:23:96:ba:2c:cb:8f:4b:6f:78:50:f4:
         59:c9:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:30:15 2025 by rpki-client