Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
File:                     44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa (raw, json)
Hash identifier:          5uTFtOiMNhYeTBLYJ5bPa0Ws1YGdtaXDWKRL5cwNR5k=
Subject key identifier:   E7:76:B1:33:42:86:F3:23:B3:BE:2F:DB:35:7E:3D:ED:78:DA:00:D8
Certificate issuer:       /CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
Certificate serial:       010D0C9F43285849631EC2F8B14399CECA375E20
Authority key identifier: C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     396168
IP address blocks:        2605:f7c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c2:f8:b1:43:99:ce:ca:37:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=c5b0250e-f1a1-477a-bf01-9250590979cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:a7:00:68:67:16:65:5d:69:9e:43:d2:3f:
                    23:0d:9e:a2:50:56:f1:6f:85:cc:e7:0d:5f:df:46:
                    d3:af:f5:ee:e4:4a:46:08:64:31:5c:af:75:40:d6:
                    85:85:20:75:14:06:6b:f8:51:fd:80:16:f8:55:58:
                    02:3b:63:8b:f1:c5:f9:17:a3:81:dc:a0:3f:a8:dd:
                    74:db:e4:79:7b:a6:d5:9a:49:45:0f:cb:9a:34:8c:
                    05:2a:32:5d:16:02:46:9c:2a:e7:7e:19:79:dd:21:
                    12:6b:a1:86:74:25:0d:c8:67:77:02:b1:ca:02:57:
                    cd:47:dc:55:af:ef:a0:99:e5:16:ae:9e:a4:0e:02:
                    e5:64:a5:27:9e:da:48:98:fa:13:a9:9c:36:81:e1:
                    2b:4a:22:9e:e2:27:f3:31:16:ce:1f:b0:99:dd:4c:
                    a7:6f:a1:36:68:75:4f:ca:0b:6b:c3:14:27:8c:76:
                    94:51:c9:4a:e6:29:ee:af:25:16:0c:e2:11:cc:fb:
                    f6:12:f6:f3:4d:6d:c0:f5:69:9f:74:4a:61:12:05:
                    5c:94:c3:db:5d:54:d7:c0:ce:05:89:cf:06:0b:16:
                    fb:32:0d:7f:b6:b8:09:12:af:f1:24:4f:28:32:27:
                    67:84:e0:76:3e:23:56:93:b5:d1:a7:7b:f9:a7:82:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:B1:33:42:86:F3:23:B3:BE:2F:DB:35:7E:3D:ED:78:DA:00:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/44b61732-51f9-3f57-a4b9-c26b0fe1ced2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.crl

            X509v3 Authority Key Identifier:
                keyid:C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c1:eb:17:de:ee:50:82:1f:ba:fe:ab:33:bb:60:f2:96:a9:
         f2:c3:d7:09:b7:56:8f:f2:e1:d5:1c:92:4f:6e:01:17:ec:04:
         df:42:2a:a0:66:0a:74:e1:06:29:3d:58:dc:4d:46:7c:a9:5f:
         80:f1:ba:b4:0d:56:c1:34:af:2b:7b:80:3f:ed:da:a1:50:55:
         15:6b:f1:98:32:8b:56:c9:33:7e:fd:5b:50:af:5e:87:dd:31:
         3d:1d:a5:36:bf:ee:35:63:03:c9:b1:1d:93:96:53:5c:18:17:
         c8:ff:fc:af:08:eb:a0:04:93:b8:46:79:c7:77:13:87:bd:20:
         a8:9a:30:fa:8e:e7:d2:85:ee:b5:41:2d:30:94:f2:d5:d0:2a:
         ef:67:ce:6d:61:a4:61:9a:6d:3a:91:fa:5d:e5:d7:e7:90:0a:
         26:e7:dd:5e:13:99:1c:f6:1c:7a:06:0b:c5:2d:66:4d:f9:40:
         57:bc:c8:10:b1:99:23:80:e3:59:3f:c0:c2:8f:31:5e:47:fe:
         d1:3c:3c:28:df:ac:60:6d:c5:94:ec:c2:a3:e3:5b:6d:e5:99:
         be:e0:eb:ce:ac:1e:28:7f:19:9c:93:b6:97:16:f4:54:7c:02:
         b2:20:88:01:e5:c7:ea:ad:4b:18:fc:98:95:a5:23:72:04:9b:
         4f:5b:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:41:33 2025 by rpki-client