Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/7560cb70-ca92-3421-a597-bf3da652520c.roa
File:                     7560cb70-ca92-3421-a597-bf3da652520c.roa (raw, json)
Hash identifier:          7MCCnNuS2svKLv1+Km1pScNNfcRLGhv+Fc0ka9ktHUc=
Subject key identifier:   2C:7C:60:84:FB:3F:28:E7:87:D3:CB:8E:59:40:B3:52:95:5D:1E:6E
Certificate issuer:       /CN=92df1f33-3fb3-4c68-a841-56ddef7c98f1
Certificate serial:       010D0C9F432858493AA3E0D924A50B2C631E5200
Authority key identifier: 56:D2:E5:6D:B9:3E:A4:81:B4:D3:75:C7:8E:4E:8C:97:8B:E3:1D:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/7560cb70-ca92-3421-a597-bf3da652520c.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     40152
IP address blocks:        2602:2b9::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/92df1f33-3fb3-4c68-a841-56ddef7c98f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/92df1f33-3fb3-4c68-a841-56ddef7c98f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:e0:d9:24:a5:0b:2c:63:1e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df1f33-3fb3-4c68-a841-56ddef7c98f1
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=de6a05a7-125c-4071-bb45-99c45f167491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:ab:c5:a5:d7:6a:bd:42:a1:d8:39:79:0e:
                    da:40:d9:6e:59:16:c9:8f:30:d1:2e:36:1c:d0:51:
                    79:c4:40:16:6b:c0:b2:f3:58:aa:b4:ea:f7:6b:c5:
                    f0:15:8c:e9:0f:9f:44:66:d6:f2:33:e6:36:aa:b6:
                    ef:89:43:7c:e5:4f:5b:e2:81:ed:f3:0b:2d:36:80:
                    2b:64:dc:82:9e:eb:19:7c:a6:7a:88:4c:0b:57:a7:
                    2a:68:46:98:a5:9a:73:ae:43:b3:d2:26:74:74:96:
                    12:0f:dc:21:52:53:42:9b:ea:18:51:56:47:c3:7f:
                    c3:22:3a:04:d0:cd:71:c1:cf:5d:57:a4:ec:e6:d9:
                    56:ed:2e:2c:5b:bc:04:7f:9d:a3:34:ef:1b:2e:f8:
                    71:44:5d:c0:6a:38:f9:25:16:6d:e9:35:ce:1a:f0:
                    0b:ed:9d:71:f4:bd:df:ce:3f:e3:40:b5:37:50:ab:
                    a0:5e:22:07:69:c0:da:c9:4f:9a:d6:c0:29:56:41:
                    f0:e4:99:bc:a3:1c:3a:35:7a:75:fa:74:f1:4a:dc:
                    a5:37:1d:0e:41:61:18:08:ef:3c:eb:d2:3c:48:e9:
                    1f:11:82:ea:86:30:2f:1b:80:c5:63:d5:fe:5e:d9:
                    5d:f3:02:24:63:47:ee:a4:7d:e6:8f:1c:84:1c:a0:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7C:60:84:FB:3F:28:E7:87:D3:CB:8E:59:40:B3:52:95:5D:1E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/7560cb70-ca92-3421-a597-bf3da652520c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1/92df1f33-3fb3-4c68-a841-56ddef7c98f1.crl

            X509v3 Authority Key Identifier:
                keyid:56:D2:E5:6D:B9:3E:A4:81:B4:D3:75:C7:8E:4E:8C:97:8B:E3:1D:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/92df1f33-3fb3-4c68-a841-56ddef7c98f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0c:ee:30:13:ad:8a:75:f2:42:32:17:77:57:48:71:c2:a9:
         85:63:af:e1:e6:b9:c0:89:0c:e4:44:18:b3:37:fc:d4:7e:c2:
         a7:e2:84:b5:5f:8e:f0:92:61:c3:d3:a6:53:dd:ed:ff:1a:43:
         f4:5a:f8:6c:fd:74:76:21:c5:c9:8e:9f:59:68:51:19:49:71:
         7f:14:f8:a5:14:32:3f:8d:6d:e3:18:b2:53:03:4c:9e:1e:f4:
         b6:e0:02:cb:2b:d0:56:1f:ef:ad:68:7b:3c:54:74:a9:90:d1:
         36:be:87:c3:45:7a:7a:f2:79:1b:e5:ae:c1:b1:12:dc:59:f1:
         e8:68:b4:8a:ad:50:84:50:ae:3b:57:7a:75:c0:d5:95:97:96:
         19:c1:13:db:05:b0:8c:ac:65:43:a9:84:28:8f:5c:83:50:b1:
         f1:78:d2:a3:43:35:f5:4a:f5:37:57:71:5a:7a:cc:4b:4f:8a:
         74:c1:e1:fe:09:da:2a:4d:00:79:67:ab:6d:37:57:e4:c1:a4:
         82:26:db:c6:8c:65:93:8f:c9:c4:f2:6f:92:ab:e5:54:69:99:
         7a:ec:86:19:e1:2f:62:86:5b:17:63:e2:fc:ef:e1:18:d8:26:
         bf:c0:58:45:ec:e8:db:f1:c5:14:5e:65:bc:a3:d6:53:66:17:
         ca:8f:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:11:13 2025 by rpki-client