Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e7a208df-ce08-35e6-8fe3-b35fe9394f09.roa
File:                     e7a208df-ce08-35e6-8fe3-b35fe9394f09.roa (raw, json)
Hash identifier:          CD5YZQj5auZ7h5laP1+DtYmWN/PQzvFpBLlgaUzbduk=
Subject key identifier:   DE:4D:7D:56:56:F5:23:87:08:06:A3:7A:26:1B:CA:7B:4E:6D:FB:4C
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B500F8CD5FB058BD2E36180
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e7a208df-ce08-35e6-8fe3-b35fe9394f09.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        2001:4c8:10fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:0f:8c:d5:fb:05:8b:d2:e3:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=73f4a026-390b-4a4b-9bcc-46e5132118b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:55:9c:c8:71:3a:32:46:65:18:b6:7b:bc:
                    a7:e0:d6:4f:e9:e1:4d:64:90:a0:63:7f:82:b0:79:
                    eb:51:f7:02:57:a1:8f:a4:63:e5:5f:8d:a7:b3:43:
                    92:32:53:51:88:93:b9:28:36:10:af:b1:9b:06:7e:
                    a5:85:09:7a:1c:a9:fc:63:5c:83:1c:b2:88:36:47:
                    fc:27:e6:46:06:26:0c:23:5d:96:0e:bc:5e:b7:a3:
                    42:2f:b3:c6:d1:53:a5:d5:1f:68:de:d2:08:0f:f9:
                    19:91:e7:fc:d4:b3:bd:fe:9c:24:aa:f1:e1:d7:2d:
                    b7:6d:0f:14:7e:0e:a8:af:7d:6e:04:38:df:0e:1b:
                    2e:1c:b7:be:5d:56:8f:7b:79:1b:be:a5:f6:81:88:
                    8c:cd:9d:e5:9b:bd:8e:e5:4d:8c:1f:20:e9:14:ee:
                    cd:05:61:a5:1b:19:91:27:cf:f6:ad:9d:0b:d7:da:
                    f8:2d:da:77:a2:9a:4c:0a:18:ae:68:fe:94:96:b7:
                    a7:4c:ae:56:98:5c:1f:cf:3e:0f:36:86:5d:95:ab:
                    73:cc:02:56:cc:73:dc:ff:55:81:50:95:30:ad:f8:
                    13:fe:81:b8:70:b8:4e:66:4a:bf:7b:cc:ea:44:a3:
                    c1:d6:3c:e5:91:de:18:84:19:19:ef:67:8d:7d:63:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4D:7D:56:56:F5:23:87:08:06:A3:7A:26:1B:CA:7B:4E:6D:FB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e7a208df-ce08-35e6-8fe3-b35fe9394f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:10fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:62:c2:77:84:ad:d9:2f:2d:01:27:e2:73:87:a9:6d:97:eb:
         fd:9a:7f:e0:ad:e2:08:56:f7:da:63:7f:ce:51:db:42:75:97:
         f7:42:34:28:04:7e:81:89:12:c7:e7:a8:69:ec:05:be:3d:3d:
         55:40:e8:ea:41:55:17:25:b4:a5:95:e1:99:ea:41:f8:c6:66:
         b6:9a:cc:0d:db:45:35:2a:8b:7c:60:e9:83:a0:9a:1c:23:e5:
         bd:87:24:45:aa:ce:4f:25:d2:25:24:99:29:45:f0:d0:a2:35:
         a6:1e:ba:51:e3:9b:f5:5e:09:6f:ba:5d:c5:05:6d:a4:15:7c:
         52:b9:3d:fb:92:ed:eb:1e:b4:4d:5a:2a:9a:f1:fd:30:6a:89:
         7b:0a:a7:98:de:d9:ea:8e:e8:7c:64:d4:f9:9d:8e:1d:5c:a3:
         00:b6:bb:91:be:18:98:e1:8d:45:30:8c:00:c2:41:13:ac:d7:
         39:a1:90:4c:f0:8d:d9:89:08:a4:7e:df:4c:b6:05:5e:c4:f9:
         4e:c8:94:94:b6:0c:5d:d9:26:0f:6c:8d:16:91:df:ed:64:95:
         42:00:41:ea:e7:bd:82:2b:9d:4e:8b:7e:0d:97:ce:f4:17:2a:
         f9:f0:62:37:72:95:f0:54:70:c5:6a:f6:3e:71:28:50:05:c4:
         70:6e:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:41:59 2025 by rpki-client