Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa
File:                     3ca1501c-31c5-3e12-8c02-67dac83d960d.roa (raw, json)
Hash identifier:          +W2ufImJoyo1dVklKJjyfX2sjfyIivmp6DMTWkJZA2M=
Subject key identifier:   F0:63:3D:50:BB:F9:50:02:C9:FF:DC:F9:9F:01:16:D1:BB:11:46:1E
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F432858497844F837F533090E26A18C00
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa
Signing time:             Wed 09 Apr 2025 14:49:48 +0000
ROA not before:           Wed 09 Apr 2025 14:49:48 +0000
ROA not after:            Tue 08 Jul 2025 14:49:48 +0000
asID:                     13506
IP address blocks:        2610:108::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:44:f8:37:f5:33:09:0e:26:a1:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Apr  9 14:49:48 2025 GMT
            Not After : Jul  8 14:49:48 2025 GMT
        Subject: CN=7c8ff683-d8ae-469c-a078-390d5cd82992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:1a:50:90:7c:e9:6f:79:52:b7:29:b1:ad:
                    f3:68:5e:9c:94:64:58:96:bb:0a:84:ef:aa:52:4c:
                    98:1c:d6:3b:96:21:bb:6c:b0:9d:ed:76:58:f8:24:
                    51:45:e4:88:3f:b0:d0:b7:1b:57:05:fa:f7:f0:d4:
                    7c:c4:a2:71:7d:b4:20:7a:e6:5f:3b:5e:6b:a5:ac:
                    e5:04:28:5c:8e:76:ae:d8:c4:58:85:50:db:00:57:
                    7e:c4:a3:ee:7b:45:62:b7:3f:7c:57:19:91:37:4b:
                    a8:d9:8f:0f:ec:c3:3c:c4:cd:fa:fe:f1:ba:59:1e:
                    04:bc:32:1f:3a:0f:46:4a:9b:6c:5a:85:85:0d:c9:
                    88:29:09:47:4b:d1:d3:35:5b:f5:d3:d0:0f:18:72:
                    0f:64:99:23:80:2c:70:b5:4e:ea:bf:b2:a0:99:96:
                    79:5d:6a:7b:32:d8:12:ad:eb:4b:f7:47:23:32:45:
                    00:75:7c:75:02:8b:2e:bc:8b:08:6d:1c:77:c4:fa:
                    35:4f:f4:ac:46:a7:62:30:f0:da:45:75:a9:ac:88:
                    53:b3:08:c5:25:01:39:6b:4a:5b:b0:b7:89:b4:08:
                    aa:02:98:fa:27:fb:53:b9:d7:08:a1:f0:fe:0d:39:
                    19:d6:25:af:5a:07:d2:c1:b3:f7:49:d9:20:f1:12:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:63:3D:50:BB:F9:50:02:C9:FF:DC:F9:9F:01:16:D1:BB:11:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:06:41:7a:c1:ce:81:cc:85:a5:a9:45:4e:57:ae:50:92:
         9e:65:20:2e:64:a4:f1:5c:7e:19:e3:8c:42:37:85:40:05:1c:
         0d:80:62:05:ee:92:78:7c:9c:04:03:40:12:d7:87:3b:3b:0e:
         fa:f4:74:e8:5f:4f:24:0c:cc:a0:9b:10:3d:59:46:2f:21:bf:
         1a:40:ef:72:33:8e:23:d6:9c:8b:28:c0:0d:8e:ad:f4:53:4c:
         47:b4:ce:ab:d6:53:4e:1f:39:a2:23:cc:4e:49:f8:93:f0:4d:
         fa:68:1e:20:66:e1:38:35:6c:ec:83:b4:8e:ce:83:95:6f:1b:
         4e:69:ee:9f:69:30:4d:7b:a9:2d:96:7d:8d:69:2b:d7:f1:69:
         ff:91:76:27:dd:8c:39:f3:11:31:3f:cf:97:9f:10:d5:1f:6f:
         99:a7:bb:de:7e:6c:0e:a4:54:d9:e3:a7:aa:f8:eb:87:d4:16:
         cf:8c:a3:9c:5d:f6:78:7a:f6:5a:4e:08:be:2f:9c:d0:55:0e:
         ef:54:f8:ab:8e:3c:6f:47:b9:4f:bd:69:8b:09:5a:02:85:ce:
         1d:a5:06:e1:46:37:8d:6b:fe:4e:56:74:df:6c:b2:e9:48:21:
         99:f4:73:af:5d:df:df:47:10:a0:ac:23:cc:8c:d1:63:c7:27:
         bd:40:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:48:57 2025 by rpki-client