Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
File:                     a33e8454-ea13-3438-bf3a-1467f7f687ad.roa (raw, json)
Hash identifier:          GO8FHl/NOZr5bXfFnFEaEORms9ExZLZ4dh1ABdQioW8=
Subject key identifier:   16:4C:AD:FB:1C:E0:60:CA:BB:30:10:22:2D:6F:F5:92:2D:13:60:1B
Certificate issuer:       /CN=daef5cc1-9697-4016-a7b1-84106520128a
Certificate serial:       010D0C9F43285848143A8125E48BF0A33C0F5900
Authority key identifier: 53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     36318
IP address blocks:        2602:815:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3a:81:25:e4:8b:f0:a3:3c:0f:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daef5cc1-9697-4016-a7b1-84106520128a
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=368bbb3b-e6dc-46e9-a6d3-faefb979ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:55:bf:48:2b:14:35:4f:b7:46:c2:07:98:
                    51:17:3e:3c:c2:71:d9:35:12:a9:48:f9:27:0e:03:
                    17:72:44:9c:75:25:e3:10:77:83:34:70:5b:89:e7:
                    d5:64:35:d2:4c:b6:ed:1e:ed:a9:aa:8c:1f:ff:84:
                    38:f5:05:3d:a9:0f:23:04:ad:3f:2d:96:66:e5:62:
                    28:c1:61:b9:c2:ab:35:aa:af:a7:47:40:2a:6a:61:
                    91:68:6e:a6:f4:db:f6:b4:fc:54:6e:22:5d:a8:0f:
                    bf:f7:f1:8a:39:38:f0:1a:d8:9f:41:9d:a7:46:65:
                    74:2d:87:77:21:f5:8d:35:6e:25:a4:cf:76:a9:ff:
                    2f:f8:0c:d3:90:77:a5:d3:c9:82:5a:f5:a8:63:2c:
                    c9:6b:fb:f5:8b:7d:9a:0c:11:7f:64:5a:a5:92:aa:
                    48:51:93:02:dc:66:4d:d1:3f:a4:af:d2:d9:90:1f:
                    1a:11:c7:e3:af:ad:10:33:df:55:fc:9f:80:d5:99:
                    6c:a9:a0:c4:5d:4f:f9:d7:f0:03:52:5b:a8:66:5b:
                    76:c6:9d:2d:7d:63:a8:60:76:33:e6:ce:79:3b:f7:
                    41:16:cf:a4:b8:e4:fd:52:35:7c:48:0f:87:f2:80:
                    ef:55:26:11:b0:26:11:6b:23:fc:50:13:6c:c2:aa:
                    cf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:AD:FB:1C:E0:60:CA:BB:30:10:22:2D:6F:F5:92:2D:13:60:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/a33e8454-ea13-3438-bf3a-1467f7f687ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a/daef5cc1-9697-4016-a7b1-84106520128a.crl

            X509v3 Authority Key Identifier:
                keyid:53:91:25:7C:64:0A:83:E7:94:79:F2:84:E6:CA:D3:67:4D:0A:25:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/daef5cc1-9697-4016-a7b1-84106520128a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:fe:51:05:6e:15:e1:93:6f:12:7c:c0:27:c5:5f:8d:71:
         2c:77:ad:25:9f:49:c3:b5:6d:79:f8:20:da:9c:58:55:c8:8c:
         c1:e1:3d:97:1e:a5:00:6c:a9:75:f8:cd:7a:63:1a:d5:21:22:
         46:a5:5b:16:0c:47:93:11:6e:31:d4:c2:ab:fe:9a:9f:f7:26:
         8d:45:ec:ef:32:02:f2:28:ce:86:5f:aa:5e:6f:eb:35:9d:dc:
         37:ab:df:ec:4f:0f:63:37:13:21:6a:ac:12:05:04:8e:4f:b9:
         71:83:20:f9:68:55:1c:d4:ff:12:6a:49:b3:17:dc:58:15:3a:
         b8:a5:7b:c1:fa:66:70:dd:d1:03:6b:15:0d:8e:6a:1b:51:d3:
         ac:0d:ec:2a:51:41:0b:10:6c:45:58:79:9d:0b:98:f0:7b:82:
         5b:61:03:0a:b5:b3:fd:79:80:e1:e5:20:02:be:e9:5c:4d:9f:
         0c:4f:77:2a:50:16:0f:8f:1c:4a:3c:99:cc:c9:26:b6:40:f7:
         d3:5c:25:81:a6:00:5c:b8:b0:57:c4:4b:f8:83:8a:97:4d:39:
         0a:a0:8d:51:de:96:7e:a9:45:6d:52:9a:ff:fb:86:6e:a0:bc:
         ef:9c:33:9d:af:7e:45:5c:78:ce:df:5d:ae:a7:95:8f:a2:7d:
         0c:8e:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:27 2025 by rpki-client