Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
File:                     a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa (raw, json)
Hash identifier:          GP7wzrj4S1RY3NRmmXUUKij10h8UxYtflkZRI0yj/lc=
Subject key identifier:   12:ED:9B:44:D3:9C:68:05:0D:67:B8:D8:19:87:CC:75:82:D0:1E:3C
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F432858491AA6C5D4D72CD99A5D837980
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        2604:3547::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c5:d4:d7:2c:d9:9a:5d:83:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=ba407fa3-ef0f-4091-91c0-5d73b657e91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:03:b0:cf:81:fa:c3:c3:b8:01:61:a9:6c:
                    4f:bb:72:ee:96:46:10:e8:08:f0:0b:d7:7b:8a:0b:
                    84:58:28:e4:85:c7:70:e3:f5:4b:de:8c:5f:8a:ac:
                    85:2c:4e:1e:7a:2d:dc:8a:53:d4:0d:ef:17:8c:83:
                    ec:e9:04:3d:49:fe:62:66:34:10:01:5d:89:a1:69:
                    5a:6b:0d:b5:af:af:c5:3e:fc:5f:14:5f:9b:1c:63:
                    1c:84:32:eb:8f:f3:17:a7:2b:da:a6:57:f4:60:96:
                    31:0e:78:53:cf:a1:b4:b0:65:d4:5b:14:ed:a5:95:
                    a8:ff:11:9e:07:7f:9b:b1:05:98:a4:d0:14:ef:9d:
                    b7:82:ec:d0:cc:f7:37:da:8f:f0:10:30:9a:e0:31:
                    0b:d5:68:95:ce:bb:d1:21:57:36:01:5a:fb:36:89:
                    4e:6a:62:4f:73:73:96:7e:f0:80:1d:08:47:a8:c1:
                    54:11:5e:04:0a:94:1f:8d:5c:db:69:6b:97:2d:b9:
                    2f:3b:62:b9:b1:16:df:2d:bc:29:9f:26:9b:59:21:
                    58:8f:cd:fc:99:2d:e8:dc:36:e6:24:df:e0:43:6c:
                    6d:a6:bf:4b:97:09:58:d9:db:61:3d:0d:29:0a:4e:
                    95:76:d7:8b:da:cf:bb:76:e9:e2:7c:1b:a7:b3:78:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:9B:44:D3:9C:68:05:0D:67:B8:D8:19:87:CC:75:82:D0:1E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3547::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:76:c3:55:7b:b9:1c:88:1e:f6:1c:02:b5:5b:d6:1d:ba:b8:
         9c:62:71:44:db:39:f5:bb:e9:af:8d:e5:d5:24:d3:8a:53:65:
         37:74:54:6e:fe:ad:2b:04:21:ae:46:50:0b:cb:6a:8c:0c:38:
         7b:11:92:7e:2d:79:7d:23:6d:1a:aa:05:0c:f6:ac:57:cd:c7:
         c1:86:91:03:0c:7f:eb:37:00:b6:98:14:7c:87:54:5e:4f:75:
         4c:76:c9:44:9e:5a:69:46:e3:08:d1:31:63:e1:cb:32:96:35:
         19:6a:71:a3:6e:e5:74:e5:5f:7e:08:6c:5e:76:ba:8f:77:12:
         4c:4f:c7:14:ef:41:67:5a:24:a8:99:31:07:42:8a:fb:89:65:
         8f:43:64:a1:4b:6f:4c:3b:7b:5e:97:b9:a0:6b:8a:7c:03:95:
         cb:f8:ae:0c:36:67:6f:b9:a3:1b:55:76:df:4f:e7:71:a4:17:
         30:13:8f:77:78:6e:23:5a:6c:0b:3c:27:d4:ce:a4:80:82:30:
         b5:70:df:8a:b9:a3:25:cc:bf:a7:5d:e3:ac:82:cf:b9:6e:f9:
         09:22:91:62:dd:97:d7:ff:58:63:e9:30:00:27:18:29:da:bc:
         1b:87:a8:ed:cd:3e:a2:f6:10:15:3c:45:f0:bc:f3:14:06:50:
         6a:4c:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:24:46 2025 by rpki-client