Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa
File:                     dd913951-740c-314f-9c1f-a2c8ba093096.roa (raw, json)
Hash identifier:          yMa2ALBG4hw/1KbMtnnYgwvKLLl6wVfnoiqSRuz804I=
Subject key identifier:   D2:D8:C4:2F:E3:ED:E2:AA:2A:9D:EB:82:FC:07:16:92:C2:FC:CC:E0
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584978411DE0E5A39C5FE1019580
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa
Signing time:             Wed 09 Apr 2025 14:42:02 +0000
ROA not before:           Wed 09 Apr 2025 14:42:02 +0000
ROA not after:            Tue 08 Jul 2025 14:42:02 +0000
asID:                     13506
IP address blocks:        2610:108:4100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:41:1d:e0:e5:a3:9c:5f:e1:01:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Apr  9 14:42:02 2025 GMT
            Not After : Jul  8 14:42:02 2025 GMT
        Subject: CN=f83476fb-a818-4448-b744-ed23613fcabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:0e:dd:16:1f:10:a8:a1:92:2a:23:6e:1d:
                    cb:aa:71:f0:1b:dc:04:f2:eb:43:d8:ae:9c:28:b7:
                    d4:b4:9b:d0:1b:c1:6f:79:0c:54:27:4e:6a:6c:85:
                    71:51:07:dc:5c:0c:d5:d8:33:ea:1e:2e:17:2f:95:
                    06:9b:c0:db:02:23:fa:0c:47:7e:43:81:5b:27:90:
                    68:df:21:f0:5e:87:0d:bb:27:9c:8f:e7:ae:e6:17:
                    77:21:d9:a7:55:57:41:3f:7f:35:61:e9:82:8a:8b:
                    ea:09:54:64:7a:bf:b7:a3:b9:39:1f:c5:81:bb:ee:
                    69:97:5a:48:1b:81:39:05:fe:3b:36:cd:1e:a1:30:
                    a3:83:30:43:e7:6a:f3:24:40:a8:4a:95:51:74:28:
                    b3:67:39:cc:89:cc:10:03:0d:18:ca:8d:c0:38:3d:
                    e6:e1:89:d2:f5:78:ed:b1:9e:c4:9a:e2:13:e8:42:
                    93:04:00:bf:10:cf:11:86:2f:fe:2c:ca:3a:84:61:
                    32:45:3a:10:c1:63:2b:11:ab:79:2c:2f:cc:f6:40:
                    a6:a8:56:67:f4:dc:62:61:09:c8:f7:10:1b:c8:ab:
                    5c:28:eb:96:09:d5:1b:88:ca:69:72:35:5f:9a:b3:
                    ed:51:bf:f8:68:68:d8:4a:37:da:90:ad:e3:aa:93:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:C4:2F:E3:ED:E2:AA:2A:9D:EB:82:FC:07:16:92:C2:FC:CC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:4100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:6d:9d:7e:66:3a:57:0f:86:bc:c6:93:1f:6e:21:65:61:3b:
         c1:b5:2f:74:d3:eb:24:cf:21:92:68:a7:a8:3e:bc:35:e3:98:
         bd:c5:c2:62:74:1d:51:c6:d4:dc:bf:2e:9b:cc:e6:23:bc:a9:
         03:52:64:8a:f9:bb:84:66:56:38:7d:51:45:14:71:91:d2:c5:
         a7:f0:f0:06:32:7d:42:03:aa:1e:ea:7a:23:d9:b9:d7:18:05:
         0d:96:3b:06:ee:0e:46:5b:47:f0:a6:75:34:8d:6f:7e:eb:53:
         8f:03:10:73:71:6c:77:bf:eb:48:77:26:33:bd:69:46:59:f8:
         31:b1:2b:7c:82:95:63:fd:e7:38:1c:98:82:c3:73:47:a4:3b:
         7f:51:a1:39:03:57:5e:12:f8:82:6c:94:68:d0:a5:44:04:2a:
         87:49:37:8d:58:a3:b8:b3:a1:7a:6d:5a:1c:09:1b:6e:fd:54:
         28:4c:eb:37:be:f1:20:99:fc:07:73:6a:72:db:4d:f4:c4:f5:
         89:bf:1a:36:5c:a1:b8:19:21:d9:bf:e9:16:94:1c:c1:49:15:
         d0:91:99:af:cd:67:d8:4a:b9:99:07:b7:55:12:e7:9a:aa:bb:
         f8:61:a1:7a:8e:68:e9:3e:c3:c3:fd:ee:a0:1c:5e:84:31:88:
         12:8f:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:49:18 2025 by rpki-client