Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa
File:                     1c798ee9-961f-3681-a449-f7df0125a0cc.roa (raw, json)
Hash identifier:          Rvp2emHUUi+s8AtQQQY00JGLgU3DQFPk4/wHVgSDskw=
Subject key identifier:   28:78:91:50:36:0C:CF:1D:A5:2F:2C:AC:46:EB:6D:91:D7:75:5E:48
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F432858493243E124E69AE175B642EE80
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     10779
IP address blocks:        2620:be:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e1:24:e6:9a:e1:75:b6:42:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=3373ee4d-2de1-4fff-bb43-a8e4c62cc7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:f1:99:e9:95:24:73:34:b1:4f:f0:1f:cb:
                    3d:a9:87:63:3b:16:6d:fc:ef:9c:db:e8:0a:75:a6:
                    89:11:21:32:d2:d8:8c:66:da:80:ad:b5:5c:48:2b:
                    e0:9f:31:1c:c7:72:f2:cd:f0:20:78:05:7f:5a:28:
                    7b:e9:b3:a2:81:63:4f:a3:e1:72:f2:ef:90:ac:fc:
                    90:24:06:b6:e2:25:bd:e2:55:54:04:82:9c:b6:3c:
                    ab:41:6f:fb:86:14:d1:04:f7:41:cb:aa:10:52:ab:
                    cb:b7:24:49:ab:cb:05:1c:7e:e2:cb:d8:d2:75:b9:
                    c3:dd:96:e2:87:5d:fc:33:d0:d5:e5:4e:9c:f7:04:
                    d9:cf:c4:28:a7:00:cd:56:b6:45:2e:0d:0c:d7:c5:
                    e3:90:f2:67:73:dc:16:c7:14:19:4d:a9:3a:13:3c:
                    b2:6d:05:f4:bf:34:01:16:fc:16:e1:d6:45:96:b1:
                    92:3d:ed:8b:40:62:f5:b4:82:e8:c4:d4:39:f1:13:
                    fc:88:41:09:d4:c1:86:60:5a:d9:8d:9f:78:3f:89:
                    ef:6a:1e:21:43:1a:00:19:40:7c:64:17:80:d0:67:
                    89:0c:f1:df:f8:05:65:b8:80:85:3c:01:5a:a9:57:
                    80:78:dc:4a:93:b4:31:45:1c:d7:90:90:2f:e1:48:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:78:91:50:36:0C:CF:1D:A5:2F:2C:AC:46:EB:6D:91:D7:75:5E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/1c798ee9-961f-3681-a449-f7df0125a0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:ad:9b:ef:78:89:f9:c3:8c:6a:d1:c4:a3:fd:13:f4:63:
         7d:3d:de:43:00:89:cf:5c:ea:cd:5b:11:f3:33:c3:9a:c4:c3:
         0e:b4:34:7a:3c:f7:52:ca:bf:db:f9:77:f5:3d:7f:80:f2:3d:
         cc:c4:f0:3b:7a:e6:cb:1a:93:01:3b:f6:43:69:6d:f9:d2:69:
         7d:cb:8b:43:b5:6b:49:ea:0c:df:74:7f:6b:99:87:72:75:bf:
         34:13:18:6d:04:70:b8:6f:38:86:a3:d2:4b:0a:06:2e:c5:00:
         e5:8d:69:c4:b0:a2:44:86:71:b9:39:57:9b:70:a0:9c:b8:ef:
         a8:b9:8c:80:c4:0a:e1:aa:0e:b1:45:f3:8f:d7:4e:6d:8e:49:
         3d:cc:38:a9:fa:a4:69:67:16:43:44:1d:54:37:9f:80:a0:ac:
         e9:f1:c9:66:27:e4:b5:51:de:22:5f:0c:f1:bf:96:32:7b:98:
         16:a6:ab:b1:2e:e1:ae:47:a3:a6:d2:fa:b2:a1:9e:57:f1:3b:
         25:9a:18:d6:88:3b:32:68:47:37:c6:fe:c5:22:17:4f:d7:16:
         90:bf:95:b2:24:6a:91:c1:22:04:6c:8d:41:63:1b:f9:fb:89:
         49:1e:5e:62:40:a1:73:5d:12:50:7c:9b:40:01:dc:60:38:7b:
         83:b0:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:56 2025 by rpki-client