Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
File:                     a33e8454-ea13-3438-bf3a-1467f7f687ad.roa (raw, json)
Hash identifier:          CYLBrZfFTwPLGfkiNgFLU0SwXS52WBzH8xh5OlvSUJU=
Subject key identifier:   C8:8D:7C:3D:A0:5F:96:B0:2D:F3:9B:53:74:E2:6A:A7:A4:CB:CB:F8
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F43285848F4F6A140744C276E5CC79E40
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     36318
IP address blocks:        2602:815:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a1:40:74:4c:27:6e:5c:c7:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=3503de35-3b2d-4fa6-8a13-5e3b27bedcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:59:98:f3:10:b3:87:4f:23:ba:df:61:b0:
                    69:94:e1:bc:4c:b6:ad:1a:f9:01:8d:f6:9f:f2:81:
                    83:1e:96:32:a9:32:28:b3:19:3c:dc:ff:92:33:fb:
                    e5:3e:44:f3:08:c9:7c:db:58:d9:10:9d:a5:ca:39:
                    87:ac:15:c1:f1:43:d8:bf:0b:17:08:e5:aa:bd:a6:
                    36:1f:a0:70:9a:17:be:13:d4:74:5c:3c:3d:31:8b:
                    79:89:67:9c:09:34:de:4f:58:c1:2b:ef:bf:35:e4:
                    7e:79:c5:9b:e3:58:25:39:92:c5:bd:7d:7a:18:12:
                    11:cd:dc:49:fe:6c:b0:5b:e3:e3:fc:57:15:46:d9:
                    ea:e3:fa:a2:e9:f8:ad:d3:bb:f1:1a:ea:75:22:b3:
                    98:6c:27:39:b4:ee:ac:90:f0:55:0d:c4:52:48:1c:
                    53:1b:6f:46:a1:18:db:45:2a:d2:79:e0:b2:12:c8:
                    84:48:13:fa:96:18:83:b2:fc:44:60:96:5b:34:9b:
                    e3:34:60:38:4f:51:fb:29:3a:04:4c:af:71:b7:a8:
                    59:8c:bb:6b:c9:c1:69:32:60:0b:5d:52:59:15:bc:
                    45:6f:42:36:47:d1:f3:b0:c0:d3:ff:e0:10:e4:8e:
                    89:bd:6b:47:5c:87:34:be:83:f4:cb:70:4f:30:26:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8D:7C:3D:A0:5F:96:B0:2D:F3:9B:53:74:E2:6A:A7:A4:CB:CB:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:4e:6f:d2:c2:1e:b1:cc:3c:4b:2e:64:66:e8:11:4b:36:
         df:30:e5:af:f3:75:a4:6c:08:9f:fd:66:06:46:ff:8d:1f:15:
         ab:52:15:76:a1:c8:a1:04:f3:6b:f3:d2:26:f4:bb:a9:63:27:
         1b:64:e1:70:6d:e7:2e:d7:76:0d:7f:7e:43:2c:44:97:49:3f:
         17:85:a1:de:a9:07:83:11:2a:c6:a7:c1:9e:3b:a5:ed:52:d2:
         b4:f4:5a:3e:b7:ac:57:30:2e:c9:85:6c:19:67:fb:cc:2d:4e:
         cb:d3:81:03:c4:60:b3:94:a4:06:2b:57:68:ab:37:a2:2f:c4:
         f6:56:7c:54:c3:0f:2b:e1:8f:22:9d:72:29:84:11:1b:ee:76:
         df:49:9a:54:aa:b4:96:ac:b6:ee:35:57:c9:df:8a:5b:ca:6c:
         e6:a4:47:4b:24:8f:91:c4:4f:87:5f:aa:76:33:ed:af:8b:86:
         84:ac:0a:c0:4d:34:87:e0:59:63:17:be:c3:a8:b4:a0:f2:c2:
         92:cd:2b:79:50:08:38:e2:ad:35:93:a6:93:d1:df:1c:e8:a4:
         17:22:22:e3:7b:f1:f0:fd:89:18:a1:e3:1d:78:5c:c0:ac:d5:
         dd:7e:60:ae:a4:77:1e:b6:b9:d5:8d:ca:95:79:46:31:71:a4:
         23:90:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:10:55 2025 by rpki-client