Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
File:                     30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa (raw, json)
Hash identifier:          XEjBj8hr+h3s+lmHs2Hg6z1UZoBvGRUW/vwaKl/sRLc=
Subject key identifier:   3E:8D:CF:75:80:E5:9E:0A:D8:24:DD:82:31:72:C0:5B:37:78:4E:3A
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F43285848BFEBA807FDA20CFD07A08600
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     395934
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:a8:07:fd:a2:0c:fd:07:a0:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=0cb63fbf-afed-4538-8d1f-75849010797f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:3b:82:89:7b:3d:18:93:76:9e:73:a6:56:
                    73:6d:bc:a8:6a:e6:77:2c:f3:53:ed:7a:70:a5:78:
                    80:bc:77:08:14:80:b1:04:12:3f:e7:56:ca:7b:4a:
                    74:2c:e3:e4:bd:46:31:43:9a:21:24:fc:99:c7:0a:
                    b9:fd:30:d2:49:d2:44:a5:7e:4c:9a:16:00:66:e3:
                    71:c2:34:a3:8f:df:e1:a6:db:ea:02:ff:51:9a:ca:
                    47:6b:fb:3d:5f:77:d3:00:19:a0:9f:7b:27:7d:99:
                    af:fd:d2:7f:2c:b7:d0:9e:f9:e8:d7:1e:6e:91:48:
                    34:31:e9:79:f1:03:63:6a:24:7c:99:1f:af:ae:92:
                    a3:6a:da:98:2d:af:d7:c0:d9:48:bb:0f:f8:f1:6f:
                    b2:45:7e:d8:09:91:c0:f5:8b:d9:ce:d5:b6:39:e2:
                    54:8d:59:81:a6:3b:c6:52:0e:df:03:fa:db:46:98:
                    d6:b0:c1:89:a9:28:af:a2:d5:35:85:a9:1e:90:03:
                    73:47:95:35:d1:76:87:b2:5f:f7:c0:ff:03:53:fd:
                    d7:5b:8e:9f:a7:d0:b4:9c:b0:40:ad:b8:c0:70:38:
                    09:1b:19:7f:72:df:18:25:27:3e:4f:35:6d:41:5d:
                    44:ec:02:3f:c3:3e:31:6d:14:81:0e:b9:fd:e9:9a:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8D:CF:75:80:E5:9E:0A:D8:24:DD:82:31:72:C0:5B:37:78:4E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/30f2a7b2-d8c6-33d2-af38-feba6d6c1f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:ab:a4:c5:96:2f:35:90:53:af:e5:d8:15:a3:07:b5:12:
         98:c8:f3:9d:59:cf:8c:f1:3e:3a:a6:1b:be:3d:3f:bd:8f:ee:
         03:b6:f0:7f:93:dd:2e:e1:0b:d6:61:e4:a4:d1:a4:bc:0c:e0:
         05:75:69:32:94:4b:8d:db:f1:19:e1:75:5b:95:20:ac:7c:eb:
         5b:86:1b:60:b9:22:d7:5b:08:a5:64:34:82:22:f0:e2:a1:52:
         07:03:85:13:c8:43:4f:6e:f2:d9:78:ff:2e:2e:04:ac:85:bf:
         ec:ee:85:fe:11:23:8a:35:70:6f:ed:0f:08:d7:3c:40:0a:ba:
         5a:fb:ab:81:1a:c3:2c:e3:c7:e2:4d:a7:f8:40:d7:78:bd:bb:
         9b:34:44:c3:0c:f3:1c:87:c2:e5:4a:4f:a3:37:a2:4c:88:a5:
         5c:c4:2f:37:32:ab:18:a7:25:53:86:71:01:49:da:2f:e3:41:
         f4:2c:01:9d:f1:af:95:cb:28:79:af:e8:ed:1a:25:89:c8:cf:
         2c:26:fd:0f:90:b2:25:85:4f:62:79:8c:a2:d0:a3:2f:d0:de:
         48:7c:fc:9f:1f:78:84:46:8e:03:02:41:b2:01:6d:86:2f:90:
         94:84:a8:f1:1f:3d:67:dc:1a:2f:58:74:c6:c5:8a:ef:44:19:
         85:98:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:05 2025 by rpki-client