Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a986a6cb-d46d-3165-9720-bf54fda592fe.roa
File:                     a986a6cb-d46d-3165-9720-bf54fda592fe.roa (raw, json)
Hash identifier:          Rd9NKzdTVMzDmOvpAUVr7KQGzd7N2pY8Vy51GTxIA2g=
Subject key identifier:   CF:81:E4:FA:22:13:22:C3:1B:2A:45:8A:49:BC:66:69:59:11:1E:D4
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584891034641A8D6A3D3CAABCC80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a986a6cb-d46d-3165-9720-bf54fda592fe.roa
Signing time:             Thu 16 Jan 2025 18:45:42 +0000
ROA not before:           Thu 16 Jan 2025 18:45:42 +0000
ROA not after:            Wed 16 Apr 2025 17:45:42 +0000
asID:                     23473
IP address blocks:        2607:f750:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:03:46:41:a8:d6:a3:d3:ca:ab:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jan 16 18:45:42 2025 GMT
            Not After : Apr 16 17:45:42 2025 GMT
        Subject: CN=f7d35f9c-6a94-4093-85c1-6e6263704783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:44:0a:62:a8:15:58:5c:70:88:55:4c:b4:
                    7f:65:09:3c:3f:f0:4a:5f:e4:23:7c:e9:14:a9:95:
                    17:4b:60:8d:80:89:bd:25:00:f9:29:3f:6d:ef:e1:
                    1f:58:3d:e4:e0:4d:5e:97:f3:22:3c:56:5f:fa:d3:
                    bb:9a:2e:d7:79:30:7c:0a:c3:06:70:9f:31:2b:31:
                    21:2c:9e:e2:ad:b4:de:91:ab:41:bb:24:16:97:e5:
                    7c:70:fd:43:2d:e0:62:2b:02:5a:f9:e3:bf:77:3b:
                    86:a1:8c:eb:ea:2a:4e:9d:2e:6d:7c:94:97:86:69:
                    58:b5:4f:b2:81:41:63:4b:b1:ef:4b:8c:30:c3:e0:
                    eb:94:d8:02:75:53:ff:c1:79:11:d4:10:b5:37:07:
                    62:a3:29:07:bf:b1:95:de:b2:38:ab:9a:99:be:c9:
                    fb:b2:06:0f:b9:54:f9:15:ed:1d:9d:a8:f1:48:26:
                    c3:f2:11:19:7b:b1:6e:98:51:70:92:55:c8:95:5a:
                    45:29:61:37:ce:c4:e2:73:b3:75:45:cb:ee:73:4b:
                    df:64:d7:5a:fc:4e:83:ce:a5:56:de:37:be:1b:2e:
                    9e:8b:8f:f5:df:ab:ab:d6:6f:94:77:18:75:1b:8f:
                    87:ea:e7:a4:e4:33:9c:fb:c7:ba:d0:73:6c:10:1c:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:E4:FA:22:13:22:C3:1B:2A:45:8A:49:BC:66:69:59:11:1E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a986a6cb-d46d-3165-9720-bf54fda592fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:9b:33:21:fa:6c:55:b4:c5:31:0d:68:58:6a:ad:7e:4c:
         9c:53:69:ee:ea:0d:78:ad:5e:e7:bc:d2:ff:ff:f5:5f:38:4b:
         f1:17:95:db:85:dc:97:13:72:b3:d8:c6:0a:f8:41:06:38:9b:
         bc:dd:25:e6:50:9b:ff:a6:f4:80:37:20:f7:3c:fa:1b:0e:dc:
         9c:47:bf:0b:36:03:13:c1:58:72:ab:dc:31:45:48:60:19:6e:
         3d:21:ae:8e:8e:56:80:59:47:8e:be:39:93:ca:31:28:62:ee:
         b5:19:2d:42:fc:91:ef:3d:26:34:50:f0:8c:59:4b:ad:cf:1e:
         8f:06:f3:91:58:46:ce:f6:cb:1d:21:e2:3c:40:14:c4:49:18:
         97:9f:d8:fd:0b:72:92:12:fc:4d:33:f7:f0:a7:9e:83:96:ce:
         e0:22:0a:43:bf:b6:fb:16:a2:fd:a6:eb:a1:92:a5:67:92:98:
         d4:27:e4:d8:e1:3e:c4:db:d5:94:ce:6e:7d:f8:5e:63:80:dc:
         20:36:55:07:69:9e:a6:bc:22:0d:a6:96:e9:8f:27:d7:16:15:
         ed:bb:a9:51:4c:c1:57:f6:30:65:d2:0d:b4:09:99:39:ec:88:
         ae:ee:f9:da:b1:56:b3:9d:65:c7:63:52:e5:05:76:ae:26:ec:
         79:94:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:28 2025 by rpki-client