Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          F4qcauWJziUivFObwiUjsn3FJLZXuXQYagFLlQVTrUo=
Subject key identifier:   59:21:7B:ED:18:59:C0:00:52:AA:65:A3:40:35:E0:6F:EB:31:2C:8C
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F43285848BE862F8C7A8331BFACC0CF80
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2f:8c:7a:83:31:bf:ac:c0:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=6762b617-cdb2-4c93-b98e-37eb904f4dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:dd:71:01:68:e5:89:47:8e:f5:ef:bc:af:
                    05:e0:ba:60:1e:ce:c3:a1:1a:24:8a:4b:62:56:1c:
                    b1:9e:0f:c0:7c:c8:54:4b:12:fe:09:8f:35:71:77:
                    ea:89:fb:1f:a3:d8:1f:08:68:a2:0e:cc:05:49:9f:
                    1e:a9:56:7a:7f:be:4d:07:80:e9:43:99:80:d3:f8:
                    fc:a6:8b:21:29:ec:42:05:7a:62:28:c0:4c:8a:15:
                    c2:5e:30:6b:c3:69:86:22:8b:97:4b:74:8a:1b:43:
                    af:a8:b1:17:4c:f9:fb:2d:6e:3d:df:bc:9b:9e:86:
                    be:0b:55:1f:2d:96:bf:a8:cb:e9:ab:09:40:d7:fc:
                    b2:d3:05:21:bf:16:ee:fc:7c:5d:ec:ee:a8:03:37:
                    a7:37:f0:c9:6b:4a:c3:3e:1c:5f:f3:46:5c:5e:1e:
                    71:92:83:0b:74:0c:33:d8:39:6c:41:5a:5b:06:fd:
                    46:25:cd:72:be:69:e2:95:c0:fd:cf:aa:f8:de:cf:
                    85:4d:79:d0:72:c7:60:82:92:9d:a4:bf:14:45:42:
                    85:81:58:8a:34:b9:c9:59:6f:ce:97:34:63:78:86:
                    d5:16:95:ea:65:d8:c7:e3:6a:a0:fe:d6:74:94:01:
                    7d:c3:da:88:c7:27:96:a3:2e:05:68:20:82:83:16:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:7B:ED:18:59:C0:00:52:AA:65:A3:40:35:E0:6F:EB:31:2C:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:83:89:e8:a2:5e:19:16:cd:04:ff:45:86:f4:18:29:cf:
         2d:49:c0:28:19:bc:70:27:60:33:51:76:c0:1b:97:1c:ae:2d:
         b9:a1:4c:f8:b3:03:be:66:e6:58:de:87:0a:71:90:5a:c5:47:
         46:62:ab:df:71:a8:9b:cc:df:4c:70:9b:09:40:7f:f9:3c:8d:
         86:43:28:ba:b8:0c:49:30:95:e6:7d:7e:2d:dd:5c:de:7f:50:
         1a:5a:e7:d9:98:00:5d:07:a2:bf:b9:ae:62:c9:75:ae:51:11:
         ae:3c:3a:84:15:81:a0:93:31:5a:5d:6b:e5:ea:e1:88:6e:ea:
         68:01:84:39:07:63:f1:60:80:cd:66:b6:6b:00:cd:c2:40:57:
         a1:63:f2:d2:03:c3:99:8d:02:7e:fa:a7:a5:54:7e:7d:33:90:
         51:c8:54:4f:6f:c7:ea:24:bf:54:df:1c:71:a8:a4:b4:01:da:
         dc:f3:64:0f:49:5f:3f:6a:e0:7a:f6:76:52:d5:6a:53:69:c4:
         01:1d:77:06:7c:04:39:0c:97:5e:77:f8:bb:dd:8f:8d:95:94:
         f5:8b:0c:58:45:e8:3c:2f:e7:c9:b8:d9:9e:5f:29:5d:f2:67:
         83:46:d2:e4:5d:dd:8f:6a:00:fc:06:6d:f2:0c:9c:50:f7:fd:
         40:d0:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:51 2025 by rpki-client