Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa
File:                     ad382bd2-7c9b-310f-a043-80133884a8ee.roa (raw, json)
Hash identifier:          Im/ToxyJzCFrEclZd+oFp45Ps09yZkBeCp1zIyfrpSs=
Subject key identifier:   02:D4:42:3D:CB:D1:2D:73:67:BF:08:FA:80:F1:0E:F0:C6:6B:9F:90
Certificate issuer:       /CN=267afcf4-a45d-45d4-bd0b-11774e4dc5f1
Certificate serial:       010D0C9F43285848DD3BAD94437EA7146558BB00
Authority key identifier: B2:3A:20:99:62:0A:D9:C0:D7:93:C2:26:2E:5F:B9:38:FF:64:89:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     401179
IP address blocks:        2607:bcc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:ad:94:43:7e:a7:14:65:58:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267afcf4-a45d-45d4-bd0b-11774e4dc5f1
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=496d1222-b019-4916-ad6e-c1a77380aaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:de:f2:77:15:08:96:44:ea:18:f6:e5:c7:
                    39:28:57:c0:f1:85:ca:ea:05:a9:f0:ad:5b:e2:a8:
                    57:f5:32:dd:9b:c7:9b:7c:6a:cb:64:b8:04:14:bd:
                    e3:71:a5:d3:56:d6:bf:c9:48:58:30:bb:4c:48:f4:
                    04:4a:f6:1c:00:fc:ea:c4:eb:2e:12:d0:fa:40:51:
                    8e:08:3c:ab:8a:ea:ff:e3:d8:a3:a2:d8:4e:62:8a:
                    25:6e:fa:c8:25:60:df:5f:46:64:dd:8b:8e:b5:2a:
                    77:3d:26:a2:85:d6:06:65:c9:49:ab:4c:cc:96:39:
                    a7:a7:2a:e6:88:31:5e:aa:bb:07:aa:5f:ce:51:85:
                    13:02:f5:9f:37:5f:42:0c:5e:58:04:62:de:17:6d:
                    b5:e1:78:12:60:37:7c:73:a0:17:09:9d:49:51:eb:
                    94:16:95:7e:57:ba:71:e1:0c:26:bb:2c:13:9e:c4:
                    3d:98:15:4f:b6:c7:41:e4:ba:b6:75:07:0d:14:1a:
                    aa:a7:71:45:ec:39:41:6a:c6:1f:81:b6:0e:fe:8c:
                    d8:f8:32:4e:e3:f6:a2:73:5f:e3:57:37:c3:0e:53:
                    dc:b7:a7:e8:31:96:d0:bb:79:49:f8:50:06:8f:00:
                    36:f3:06:a9:71:d9:ba:49:08:4e:01:42:20:a6:d0:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D4:42:3D:CB:D1:2D:73:67:BF:08:FA:80:F1:0E:F0:C6:6B:9F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/ad382bd2-7c9b-310f-a043-80133884a8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.crl

            X509v3 Authority Key Identifier:
                keyid:B2:3A:20:99:62:0A:D9:C0:D7:93:C2:26:2E:5F:B9:38:FF:64:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/267afcf4-a45d-45d4-bd0b-11774e4dc5f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bcc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:9a:98:28:76:cc:c5:a0:5c:21:84:55:a3:20:2e:c9:7d:
         ac:11:fd:0b:ea:11:b6:6c:2a:6c:94:93:66:e3:a4:4d:25:c8:
         00:28:dd:9a:d3:6c:16:a9:3b:bc:0b:35:c2:1c:c8:bb:a1:0b:
         3d:e9:24:ba:64:3e:a2:c8:37:93:e6:9a:d2:fb:99:ed:6d:38:
         bf:13:d5:d9:3e:17:29:b7:08:0c:1d:d5:83:ec:cb:a7:22:5b:
         d9:1f:d5:cc:8a:8d:4e:1f:01:0a:81:44:4f:2d:0e:e9:6a:d7:
         ad:df:b1:36:a3:5f:9c:28:c4:10:e8:69:1e:37:34:9c:58:5a:
         30:bc:ed:95:3a:30:04:e2:e8:26:70:bd:71:70:6f:46:52:33:
         38:18:a8:34:48:a3:a2:82:6c:13:ff:6e:62:cc:e1:16:54:ef:
         00:92:d4:55:e9:32:8f:48:ce:ed:38:27:ec:79:dd:e8:37:d6:
         c6:e5:ba:b8:32:8f:3b:1d:71:a1:13:96:19:50:64:24:b4:b6:
         c4:c4:d7:72:92:60:22:d2:a3:a4:bb:d1:df:11:7c:b2:0c:35:
         d0:6c:ce:cb:7f:97:c0:27:7c:62:68:8c:db:8d:b8:31:78:97:
         e5:74:26:35:37:41:c4:74:a6:a9:ad:41:24:b8:e4:96:5c:d7:
         01:07:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:34 2025 by rpki-client