Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
File:                     2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa (raw, json)
Hash identifier:          zArcBlBullnfHrpU/xqeigIFUYC2cUJDH4ObiwancOQ=
Subject key identifier:   F6:CA:DC:2E:AF:15:9A:5C:17:D2:56:F1:82:F6:17:1A:ED:3D:8E:45
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F432858486695BB1D19D01BEC543D1380
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     20253
IP address blocks:        2606:bc40:f0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:bb:1d:19:d0:1b:ec:54:3d:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=278da317-73fe-4c90-97ee-460b49bdf72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:77:50:94:61:5d:f0:51:63:f4:e4:66:c1:
                    6a:14:f3:9d:69:0d:d4:82:cb:57:80:02:2e:8b:66:
                    df:58:48:77:18:a7:dd:a3:b3:d8:08:46:78:4a:1a:
                    63:25:fe:6a:c2:00:1f:3e:c1:55:e6:86:87:98:00:
                    88:2c:38:f3:aa:4f:66:57:75:8f:41:87:e5:32:5f:
                    2d:8e:de:75:a7:71:38:83:83:ee:fa:7a:a7:14:a2:
                    a5:78:06:34:f8:13:47:cb:90:7c:d6:c9:1e:31:87:
                    0f:9b:d4:f4:81:7b:f5:e4:07:26:f5:87:8d:10:96:
                    16:74:85:25:c5:fe:ca:e5:5c:4e:cd:c1:92:4d:bc:
                    9b:de:03:82:ad:30:6f:41:73:93:b1:1c:d5:13:e1:
                    1a:3d:f5:41:7c:90:4f:e5:f5:97:79:cd:38:20:56:
                    b1:4d:3f:9c:f8:68:cd:39:f6:43:d8:23:96:72:02:
                    13:f3:83:d2:c2:b6:03:f3:6f:4c:d7:a8:d0:7a:af:
                    01:3f:50:7c:d3:29:f5:00:b1:48:df:a8:2c:42:15:
                    0e:2d:50:a6:11:ca:8b:6d:bf:66:4a:2a:aa:6e:72:
                    68:4c:b8:7a:50:6e:40:8c:da:ee:c5:f8:85:2f:c0:
                    70:a3:96:83:bb:39:b2:33:32:1d:7c:ab:d2:21:50:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:DC:2E:AF:15:9A:5C:17:D2:56:F1:82:F6:17:1A:ED:3D:8E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2ca15b8f-fe5b-35c9-966f-7f8a15c5f18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:f0b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:8e:89:7c:f5:00:97:10:0e:4a:7d:c0:a4:3e:49:00:43:
         8b:87:40:46:e2:91:15:c0:00:2d:6f:d1:e4:5c:70:0b:5c:af:
         b5:25:f6:91:39:50:ae:44:61:4d:bc:b4:28:b7:01:36:06:b5:
         ff:23:5b:be:22:47:90:a7:8d:02:77:cf:e8:2c:1b:59:72:66:
         16:c8:b6:15:a1:ec:c9:cd:15:ff:b8:d7:ef:ce:5d:f0:ef:ea:
         ac:82:71:8b:72:97:88:b9:4c:5c:f3:3b:14:39:4f:79:25:db:
         78:1f:e5:93:c9:df:39:2e:b4:47:78:e3:5f:f0:b9:f0:13:4b:
         1a:3b:76:11:29:b8:f9:91:08:c7:0b:40:b9:11:d7:69:61:f7:
         7f:44:cd:24:a9:32:5e:18:b8:91:5b:48:1d:ee:e4:a3:31:df:
         de:bb:84:98:d4:65:da:3f:30:74:ac:86:e8:40:89:8f:b3:cb:
         ab:a2:35:ea:e0:40:60:0d:34:c3:c5:b3:30:85:1e:e8:33:2d:
         fb:94:f9:0b:a4:bc:27:75:76:3f:dd:c7:4c:07:3f:cd:f9:2f:
         93:10:e3:d5:79:10:4b:97:ef:4e:f3:4b:49:6c:24:5c:68:99:
         51:22:6a:32:37:ed:bc:d8:38:36:6d:d0:39:13:38:47:e3:7d:
         13:02:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:13 2025 by rpki-client