Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa
File:                     131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa (raw, json)
Hash identifier:          mVgDCToOSOHbFeRUspp2psVO4hLd4GoSvcjlw/Z5zcs=
Subject key identifier:   87:8B:B1:26:03:E7:8D:8C:6A:71:FA:B2:78:F2:9B:7C:A7:79:62:09
Certificate issuer:       /CN=387b8a97-889c-48cd-b72e-4329cc21745b
Certificate serial:       010D0C9F432858485A057F780A5E40DBC55B70C0
Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa
Signing time:             Sat 28 Dec 2024 02:00:38 +0000
ROA not before:           Sat 28 Dec 2024 02:00:38 +0000
ROA not after:            Fri 28 Mar 2025 01:00:38 +0000
asID:                     396530
IP address blocks:        2607:a6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5a:05:7f:78:0a:5e:40:db:c5:5b:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b
        Validity
            Not Before: Dec 28 02:00:38 2024 GMT
            Not After : Mar 28 01:00:38 2025 GMT
        Subject: CN=87e6162b-d399-40cf-aa34-5c769784e4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:40:77:59:52:56:09:ab:db:eb:ae:c2:c8:22:
                    e4:93:a7:9f:48:08:33:f8:74:49:cb:8f:d3:d9:79:
                    8a:6b:5a:2f:14:33:66:a9:84:66:69:1c:2a:1e:1b:
                    6c:79:cd:83:48:a1:62:09:46:a0:36:85:1f:44:e9:
                    d5:b2:d2:ce:ae:7f:52:d5:d1:5d:ae:f2:0c:4a:86:
                    1a:d5:04:cf:a2:fd:c1:ba:75:bb:1c:f7:5c:91:83:
                    a7:52:b0:45:0f:08:56:7d:91:1e:4c:16:00:e7:dd:
                    3a:e8:d9:e5:e5:de:0a:37:c2:be:bd:43:66:56:8b:
                    a6:1f:24:c4:13:ca:e2:f0:b3:bd:2c:88:6e:09:e9:
                    d5:56:73:e8:b3:8b:7a:1c:77:66:76:07:b7:93:1b:
                    e9:bc:be:a4:bb:6e:9b:3d:75:fb:ca:db:ae:bb:16:
                    5b:6c:97:7c:0b:c6:dc:47:20:50:15:48:82:f0:7b:
                    64:b5:92:0f:05:23:20:55:9e:38:bb:43:7f:70:31:
                    cb:59:11:18:83:23:ba:1d:4b:85:37:27:1f:ea:bc:
                    b5:a6:be:c8:5a:d8:cf:8b:75:c4:b5:ca:3f:d9:84:
                    bd:d5:b9:bc:32:1c:de:bb:8d:55:22:59:fd:d3:19:
                    29:5d:0b:dd:f8:c3:32:d7:41:b5:8e:be:57:62:d7:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8B:B1:26:03:E7:8D:8C:6A:71:FA:B2:78:F2:9B:7C:A7:79:62:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl

            X509v3 Authority Key Identifier:
                keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:cd:28:69:71:8f:e9:ce:c4:97:95:81:4b:d5:fd:fb:f2:
         6c:66:a3:59:00:6b:e5:62:2b:b8:b6:02:ab:6d:f4:8a:cd:97:
         9f:a7:d5:b3:b0:6b:6b:47:30:93:e8:32:7c:ea:cd:a2:e9:2f:
         15:07:e9:f0:13:12:bf:b1:ee:cb:1d:3e:9b:5d:5f:14:9f:1c:
         4b:93:d7:e8:d5:7e:88:94:86:10:4a:2c:39:76:d1:b4:54:00:
         bd:c4:0a:ea:e5:fb:1c:06:9d:c1:ab:16:ce:e0:5b:8d:14:a7:
         e7:cd:2f:58:ac:c8:a1:05:05:1e:22:ab:d7:40:34:4b:8f:43:
         8b:95:fb:f6:0a:f8:87:b8:4f:15:7d:bc:56:44:8d:ee:27:1f:
         ef:73:6a:1b:d5:68:f5:d3:f5:ef:43:8b:e6:d2:6e:a9:c9:06:
         fc:17:e1:86:8d:95:45:a1:6f:05:9e:01:8b:f0:12:3e:24:7c:
         ef:65:a6:41:d0:d8:5d:69:86:4a:f1:06:7c:5a:4c:17:9a:5f:
         bb:6d:25:9c:de:95:5e:5b:15:e1:9d:9b:ce:59:a8:78:e8:e7:
         90:cc:af:4e:63:72:e0:ac:82:93:fa:55:a4:3b:77:40:6d:85:
         d7:00:3d:5e:06:04:fd:d1:52:93:65:f0:f5:97:b9:df:43:1c:
         71:13:a8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:04:28 2025 by rpki-client