Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa
File:                     fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa (raw, json)
Hash identifier:          ePqKVlco0+JxUKZ7x0Ym3DrZonHUzPlxkMMwoQ/dm9k=
Subject key identifier:   C8:30:43:7D:69:37:77:78:28:E9:E1:B3:16:D6:D2:85:C3:5E:54:A5
Certificate issuer:       /CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
Certificate serial:       010D0C9F4328584968B41EEC08FE08EB9BB67B80
Authority key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     3477
IP address blocks:        2620:12e:b000::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:1e:ec:08:fe:08:eb:9b:b6:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=39e77be5-177b-4e5f-9dd9-38b74ee1a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:4a:fc:0c:4e:57:6c:7f:23:ff:d3:12:ce:
                    a5:2d:f9:54:17:12:3b:e8:93:76:e2:aa:15:11:46:
                    11:53:3c:1a:5f:56:89:20:08:6c:08:4a:f4:b1:ee:
                    7b:a0:54:df:fb:26:45:2f:7e:c2:6b:45:45:32:2e:
                    3c:30:3a:08:b3:48:d1:c0:f3:ec:96:02:60:b6:56:
                    3d:20:50:66:ef:ca:ed:c4:d2:e8:31:17:37:c7:19:
                    39:ea:60:29:39:13:99:c9:3f:f3:19:aa:4e:f8:2e:
                    5c:ee:ca:b8:9a:c4:a2:df:f2:5a:b1:2c:b9:f6:eb:
                    9f:b4:88:f3:31:78:c1:b9:f9:76:51:1e:15:f2:ca:
                    d8:b2:ce:b5:a4:33:e0:89:51:89:ce:ac:64:3d:dc:
                    5b:b1:7a:b2:c6:62:d2:72:63:9c:59:8c:ca:04:48:
                    fc:6f:f2:ba:4f:3b:aa:df:2d:2a:ca:04:26:c7:a4:
                    4e:ac:13:6c:a2:44:6c:c0:6d:e1:b9:12:47:fc:74:
                    db:27:ed:ac:cb:c0:29:dd:e9:dc:52:f8:39:63:ee:
                    26:f0:1e:cb:a0:bc:2e:57:95:60:4a:76:c6:7a:71:
                    40:7d:01:87:cf:86:06:f2:6a:a5:ca:4f:5b:86:d8:
                    04:40:49:a5:1f:6c:21:2c:82:56:80:9a:e8:3a:c4:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:43:7D:69:37:77:78:28:E9:E1:B3:16:D6:D2:85:C3:5E:54:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/fc1bdf31-d6ba-35ad-9615-093ad4b3f160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:b000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:85:8d:85:ac:da:7d:3e:ad:72:03:78:26:fd:94:42:7a:
         d6:c0:f9:67:6d:0d:d5:3a:37:59:49:be:d5:c2:0a:cb:19:b6:
         80:20:8d:2f:39:fb:f3:1f:90:58:99:0b:b2:a9:e4:95:42:e1:
         cc:84:ab:4a:d0:58:1f:2a:1d:a6:2d:60:1c:cb:fd:4d:54:f0:
         a4:9b:6d:e6:f1:df:53:e6:99:ec:1a:84:e2:76:19:40:d3:d7:
         f9:60:95:22:84:8a:8c:ad:ae:a2:be:01:db:97:c7:fa:53:e1:
         ad:08:1e:53:65:e2:eb:5c:3d:01:cf:49:ce:de:13:ef:37:fd:
         05:4c:37:b2:b0:6f:ba:17:69:97:88:db:ce:82:27:3d:8b:1c:
         ee:2d:7d:c4:4b:a7:0a:7c:5f:5e:38:09:4c:90:07:7a:dc:2f:
         4a:cf:44:ec:be:e1:cc:c3:d8:c5:66:94:92:a2:4b:f2:1b:37:
         80:42:5c:8d:10:4b:ec:3f:85:b8:64:0d:00:74:2d:83:69:f9:
         5b:22:8d:01:ac:d3:8c:40:66:3d:0d:6f:3b:10:1e:cd:e7:c1:
         05:84:ed:f9:14:78:63:4f:d3:97:2d:8e:7b:c3:10:c5:3d:c5:
         89:fa:7d:a2:cc:c3:bb:25:a2:e2:9a:01:bc:8c:3b:7e:65:54:
         4b:84:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:34 2025 by rpki-client