Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
File:                     304f07f6-04cc-39ec-8d73-e2fe0365d858.roa (raw, json)
Hash identifier:          dNvozjh88wWejjIvpZvL5lLsmJIf+oBXayVSTa3LOSI=
Subject key identifier:   66:25:73:7C:84:25:E1:69:06:73:14:B7:15:6D:1A:90:5D:14:F0:F7
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F432858490B4C2825E85C61421D060800
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     18450
IP address blocks:        2602:f919:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:28:25:e8:5c:61:42:1d:06:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=2edd4354-fc4a-437c-b7fc-f140f2abccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:7d:08:f9:48:15:7d:20:96:7d:45:7b:10:
                    55:92:f7:79:9d:fb:dc:0f:e9:99:4d:fe:25:0b:36:
                    5d:71:9b:47:e5:ff:ef:ae:fd:1d:19:76:e9:e7:75:
                    98:50:bd:90:03:17:65:71:2b:8c:c8:4f:42:5e:6f:
                    7c:37:0f:58:54:53:88:18:0f:01:b5:25:07:8f:ed:
                    92:dd:17:ee:25:c3:14:c7:d3:12:2e:f4:4b:bb:62:
                    c3:f3:14:f6:19:84:43:8a:f9:0e:11:8d:5f:1f:bb:
                    1f:6d:71:b4:43:a0:6c:25:87:69:3b:93:e5:e4:39:
                    73:fe:85:02:ed:a9:42:f2:3b:e8:0c:c5:3f:f2:5c:
                    c9:cf:4f:2c:2d:ac:d7:6b:c1:4b:60:b8:ee:db:52:
                    8c:d9:f5:1c:fd:c7:5d:84:5e:e1:05:6e:fe:09:fe:
                    93:0d:c5:7e:e5:f8:93:50:9f:72:a9:da:f6:8d:7a:
                    97:ca:49:d4:36:03:f1:0a:03:a1:c7:54:02:8c:a3:
                    48:42:4e:9e:d1:dc:15:6f:20:d5:eb:f7:79:ab:7d:
                    8e:cf:74:4d:d9:d6:39:77:43:65:95:46:08:7d:d4:
                    5a:01:ac:0f:6c:86:e3:d7:22:d1:01:d7:40:56:7f:
                    8d:c8:8c:5c:61:96:cd:3e:cd:15:ea:b9:8b:91:d6:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:73:7C:84:25:E1:69:06:73:14:B7:15:6D:1A:90:5D:14:F0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/304f07f6-04cc-39ec-8d73-e2fe0365d858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:103::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:f7:d8:a6:ee:b1:e5:3d:ee:2e:37:ec:89:5e:76:80:fe:
         52:92:6d:3c:95:f0:11:0a:b4:54:ac:a4:b4:18:06:70:ef:7b:
         f9:0f:8c:26:fc:3a:67:bd:1b:8c:4f:5a:30:fb:57:92:ee:ef:
         6e:d9:a5:e3:fb:c1:c5:6f:eb:07:be:01:73:e1:12:54:67:09:
         15:28:80:09:f9:f6:b7:76:2c:13:74:9b:a3:c0:bc:36:b5:ac:
         17:c5:ce:c7:a6:5b:e9:b4:b2:a9:8b:e0:b4:38:14:d3:81:7a:
         39:6a:3b:4b:96:25:dd:9d:14:52:74:3f:04:8d:41:ff:cc:a7:
         a2:49:8c:05:42:e1:60:fa:9b:9d:1f:9e:61:d6:75:bd:0a:9f:
         3b:ba:83:eb:5f:c0:fd:a8:61:1d:19:65:82:b4:a0:79:e3:8f:
         08:c5:6c:ca:a3:b8:62:fe:ce:74:5b:08:f2:14:15:5c:59:7d:
         dd:15:b5:24:df:f7:a2:0a:2e:ce:76:79:8c:55:e8:eb:86:01:
         85:b7:0f:fd:31:eb:bc:d1:b0:13:b9:6b:e1:81:8f:7a:d0:f8:
         09:bc:f4:59:5c:49:76:e1:de:ac:07:e4:f9:63:05:1f:c6:74:
         bf:b3:80:ec:8f:59:c3:ae:60:4a:92:99:8f:d3:a7:84:1f:61:
         be:62:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:07:18 2025 by rpki-client