Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa
File:                     ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa (raw, json)
Hash identifier:          alT8ZhdMjtS0YAR79NLxyJ/IEqbdNK3CFYrM6IMHeRY=
Subject key identifier:   E8:84:25:4D:4C:56:07:03:F9:9B:6F:0A:EC:8D:F0:6B:D5:CB:74:3B
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285848CB8DCD72D4DEB9AA22DD33F0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa
Signing time:             Thu 06 Feb 2025 18:01:42 +0000
ROA not before:           Thu 06 Feb 2025 18:01:42 +0000
ROA not after:            Wed 07 May 2025 17:01:42 +0000
asID:                     396422
IP address blocks:        2606:7fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:8d:cd:72:d4:de:b9:aa:22:dd:33:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Feb  6 18:01:42 2025 GMT
            Not After : May  7 17:01:42 2025 GMT
        Subject: CN=2e861ade-3f5f-47c4-98f4-57e7da6b50e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:38:a4:f8:09:78:46:f1:44:c4:41:af:70:
                    84:32:92:ff:bf:ed:92:b6:9f:a9:e4:34:0d:53:20:
                    50:e3:84:e3:a7:f7:2c:2f:be:f3:b9:90:06:94:6c:
                    3c:06:80:69:3f:04:d0:5e:3e:65:75:69:e1:6e:f9:
                    78:47:1a:2a:ba:66:de:24:3f:b1:b5:5a:08:93:55:
                    83:67:cb:46:2b:2b:ce:c4:f4:8b:0e:2f:00:8c:ea:
                    13:61:df:5a:3f:a9:fd:10:cb:c7:3f:24:4c:06:16:
                    ea:51:a8:22:f8:41:a2:aa:af:b5:0a:bd:16:06:87:
                    4b:76:1f:ef:f0:82:0c:e3:bd:67:18:25:c5:c2:2e:
                    6a:80:d7:a2:f6:bf:c2:40:f3:2a:43:b5:76:fa:44:
                    92:0c:62:e6:c3:11:c0:c8:02:5d:2a:27:bc:1b:f5:
                    7f:98:ae:2a:f5:7f:74:04:f2:7f:80:54:a9:cd:72:
                    25:3d:fb:d8:95:9a:c6:fd:d0:7b:83:41:d5:d0:3c:
                    c1:7d:5d:14:5f:13:45:df:ce:9e:fc:c8:59:45:20:
                    80:7a:70:e8:e9:dd:e7:7f:ab:5f:f9:ed:b2:dc:41:
                    5c:61:ab:09:50:94:7d:11:b6:a9:a6:b5:00:c9:35:
                    f9:1d:8d:1e:78:34:25:2b:be:65:c6:99:af:4b:49:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:84:25:4D:4C:56:07:03:F9:9B:6F:0A:EC:8D:F0:6B:D5:CB:74:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ea5c2977-d2af-3b0c-9d81-7013c2c8b9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:36:0f:09:6a:3b:25:e9:9a:41:40:f6:c6:45:7b:9a:a1:65:
         7e:63:74:14:7f:00:9a:49:d2:20:80:68:f2:ba:e1:da:3f:ae:
         b3:bd:33:7b:ce:65:07:95:46:01:63:ea:9e:9a:ad:b5:97:74:
         4f:71:af:b1:21:0a:28:5c:43:1c:d8:4b:cb:8f:24:5c:ea:7f:
         ea:03:51:28:d4:eb:e4:64:38:35:f2:f1:52:3f:32:85:da:dd:
         c3:af:38:b5:21:74:b5:e7:4d:3f:a2:36:cf:cf:da:12:c5:fe:
         c2:c0:b0:11:c2:5b:d2:79:75:1e:dc:db:2f:7a:be:52:63:65:
         a0:2d:73:a3:7f:1f:ef:bb:73:ed:53:5b:81:49:62:77:6d:6f:
         5d:e3:64:d1:8d:20:70:f0:6b:e5:08:b3:e4:a6:ae:be:db:73:
         82:49:39:9a:aa:0c:0a:9a:51:8f:54:c5:ae:19:48:3d:c8:fe:
         d6:53:1f:f6:c6:72:16:ad:1e:fe:08:b7:db:fd:17:bf:f5:89:
         9d:7e:f8:46:2f:e4:36:ee:e1:a9:29:de:aa:55:a2:44:ed:50:
         84:5f:f2:77:bf:a5:4c:e8:fa:23:b7:ff:ea:90:92:0a:29:28:
         45:09:24:58:63:46:a5:9a:d6:8d:bc:32:a6:f7:7f:1f:b2:9b:
         2c:1b:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:45 2025 by rpki-client