Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa
File:                     0cefe89b-d729-38a2-87b5-8530769b82bf.roa (raw, json)
Hash identifier:          m5G/OICcqXHksoAt/LZISjYY7jSVgrBM7Uks8Og37KU=
Subject key identifier:   87:DC:5E:01:75:3D:DB:27:3A:D9:51:CE:F1:A2:86:C5:EE:C0:79:9F
Certificate issuer:       /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
Certificate serial:       010D0C9F43285848BBBB80974141F4D1290050C0
Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2602:814:b00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:80:97:41:41:f4:d1:29:00:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=a50bb51f-d90d-4577-8ae5-0409e37207ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:4e:b6:1e:f8:56:3f:8c:c4:c2:5e:11:a5:
                    81:f5:09:79:74:ae:4b:7b:09:f0:90:2e:9d:8f:5f:
                    57:c4:66:2d:3d:7e:31:d3:69:83:0f:bb:78:77:9e:
                    1c:8c:67:91:87:d0:51:93:ee:ac:42:21:98:a0:c3:
                    f3:31:b4:09:01:86:ad:3a:5f:27:20:c5:25:3f:2a:
                    e5:44:dd:cf:82:3a:aa:72:3f:60:0e:00:36:84:8f:
                    ff:20:f3:06:a0:82:0b:fe:dc:e7:3f:b0:83:69:99:
                    87:b6:a8:07:85:9e:b4:42:05:c5:b9:dc:fa:44:5d:
                    31:dc:ee:11:2e:43:7d:6f:43:ca:1e:55:89:0c:cf:
                    67:64:dd:e7:69:b6:b3:0f:2d:e3:e1:ef:fb:00:42:
                    88:be:36:05:fc:13:5e:63:5c:2f:2e:5f:9b:1d:50:
                    bb:93:46:96:29:88:40:4c:b8:55:5b:16:57:bb:3b:
                    a1:01:cc:f0:cb:6b:84:ae:21:d3:1b:c7:0d:54:67:
                    de:80:28:71:c9:39:5f:a9:6c:b5:a3:8e:6b:2b:6a:
                    02:fe:90:1a:57:71:a0:a7:ac:11:70:91:6d:55:ce:
                    fd:1a:ae:37:ce:ac:f8:61:2c:51:39:10:ad:57:95:
                    64:3a:84:2a:63:5c:0f:09:e5:89:67:0c:db:7f:b8:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DC:5E:01:75:3D:DB:27:3A:D9:51:CE:F1:A2:86:C5:EE:C0:79:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl

            X509v3 Authority Key Identifier:
                keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:b00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ce:04:5e:25:e4:c0:fb:55:c3:c0:91:40:69:5e:23:f0:dd:
         03:de:1b:8a:64:36:75:f7:ea:c9:b2:27:a5:01:14:95:96:99:
         05:d9:54:43:99:f6:e5:4f:aa:0c:c9:f0:bf:0b:af:68:eb:69:
         b1:0b:9a:b9:3c:c4:02:91:a9:1b:4c:a0:30:63:b7:3f:14:d8:
         2c:3a:da:05:50:7a:11:92:a9:a4:ba:44:8f:e0:92:fa:2f:da:
         d8:5e:45:ec:3b:ca:a6:6a:a8:6a:c0:bc:b0:4d:12:66:8e:71:
         ab:a7:d0:71:3a:6b:d9:6a:9b:2d:d5:89:f5:06:05:15:83:1b:
         cf:a5:d1:5e:92:75:72:85:5a:10:80:31:4b:ca:28:cf:92:8d:
         7a:97:cd:2f:56:7a:83:b5:80:81:34:a4:d1:35:a2:73:b8:26:
         56:f1:90:e8:f8:a3:b8:8e:70:51:a2:fa:dc:f4:8e:7a:0a:db:
         40:21:30:71:9f:22:cf:9c:63:24:48:ba:f7:36:ae:bd:20:03:
         18:aa:c1:43:d7:49:99:15:cf:e2:8e:f3:17:40:4b:81:da:e6:
         86:4a:e4:f4:a0:c3:83:00:a8:95:6c:72:a3:85:3e:3d:33:7a:
         5a:4c:77:00:3e:7a:0d:52:62:a0:2c:81:d6:18:cd:61:49:1e:
         0e:64:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:18 2025 by rpki-client