Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa
File:                     f363798d-260b-311f-8360-1b9c8543e090.roa (raw, json)
Hash identifier:          EzSHm/uGvRND6ETsj7wBLrKlbMF9SXIjdvxr5DZxz7c=
Subject key identifier:   F3:61:3B:74:0C:EF:BE:C6:83:06:C5:95:6F:75:33:C6:A8:16:31:3D
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584851A57FFC2D6424C6CC239380
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     398774
IP address blocks:        2607:2240:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7f:fc:2d:64:24:c6:cc:23:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=45c44ac6-078d-4b3b-9b8f-47909ac77c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:ca:4e:ab:2f:49:2d:cc:77:49:80:c7:42:
                    16:09:f0:c6:36:f1:db:28:56:77:62:ce:d3:7b:cf:
                    74:c1:9a:57:4b:10:0c:19:25:d4:56:c6:60:5b:fd:
                    9c:aa:bc:49:a5:ee:29:7d:18:31:c0:ae:ea:62:87:
                    f3:f6:0d:d5:c3:05:e2:dd:0b:d7:10:24:ef:0e:e1:
                    d4:15:b2:eb:1e:7c:6c:98:db:36:bb:de:d1:86:b1:
                    40:dc:c7:fd:49:32:8a:a4:fc:7d:f6:68:7b:44:6a:
                    df:15:f8:66:2c:41:ee:16:8d:2e:1e:20:55:ad:89:
                    1f:aa:73:d7:8b:5d:73:04:de:d9:4b:dc:6d:a9:82:
                    0a:fd:ed:f3:c5:a9:78:af:1a:fe:9c:c7:ad:68:6e:
                    54:50:e8:69:9e:15:a0:3a:ad:d1:7c:9a:4d:ce:80:
                    58:a1:48:42:62:4e:1e:a0:bf:f6:a7:be:40:15:2c:
                    14:05:fb:6e:9f:72:d3:76:a8:49:b8:b0:1d:ee:13:
                    55:f7:74:3c:0e:6b:35:ac:42:6c:77:6d:08:23:c4:
                    70:e8:c9:8e:a2:49:5d:3f:6d:5e:ff:ec:2d:e1:ca:
                    10:46:8e:ef:11:6b:e4:69:bf:6c:d7:41:42:e0:12:
                    61:40:85:9c:35:99:32:dc:ce:0d:b2:cc:bb:ca:ee:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:3B:74:0C:EF:BE:C6:83:06:C5:95:6F:75:33:C6:A8:16:31:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b0:78:df:a6:7e:37:f8:0e:2e:7c:f8:12:7f:5f:f4:15:e9:
         42:0c:55:e8:0f:3a:ac:4d:e2:a9:54:5d:5b:9d:c8:23:36:7c:
         b8:c9:ef:9d:fc:ac:e1:2e:fc:71:4c:4b:14:ae:bb:dc:81:b8:
         7c:60:86:d4:34:5b:95:9b:4e:b2:c1:ce:b6:a7:8a:04:a9:34:
         af:76:5a:8e:e6:9c:8e:1d:e8:ff:00:3a:15:24:84:c2:53:fa:
         71:23:41:ad:a3:55:da:01:55:3e:a2:34:cf:08:d5:e1:06:ef:
         f1:09:ec:1a:b6:41:26:6b:9e:69:11:ec:36:00:9b:0f:7c:d3:
         e6:5f:e1:b6:75:b7:f8:fa:c7:40:c4:c9:81:fc:05:3e:d3:46:
         d1:46:bb:ef:b8:55:50:d3:6b:c6:d4:f2:de:06:37:f2:d8:7a:
         c4:99:71:d8:8c:d7:1e:97:cc:81:04:ff:7b:32:3b:b1:85:3b:
         6b:c8:dd:bc:68:fe:f9:54:3f:f2:74:f0:25:39:3d:e1:45:76:
         cc:c2:e8:14:ed:8f:23:c5:ff:e5:66:44:62:c0:c3:ef:0f:d5:
         78:50:05:b3:64:2a:fb:2c:0a:ad:1e:e0:66:c2:e6:39:26:bd:
         83:32:5f:1a:f6:76:05:2a:f3:91:17:1b:3a:5a:43:69:cd:b2:
         a3:a0:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:13 2025 by rpki-client