Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa
File:                     1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa (raw, json)
Hash identifier:          +YxiHP35+wxV1Rc3bopJdTrr1YcjSdD1sqhuz5sUgGw=
Subject key identifier:   AF:A1:2A:14:84:4A:7C:1F:0E:C8:0C:3B:0A:F8:72:22:EB:38:47:DD
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F432858497F09A5119182F02289D6B480
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     46474
IP address blocks:        2602:819:e004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a5:11:91:82:f0:22:89:d6:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=719ddfd5-0e94-4920-9dbc-20d4eb065f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:18:7a:aa:dc:bd:7a:a9:29:72:20:12:a6:
                    24:8e:50:de:e7:c3:6a:d8:b0:bf:43:f7:84:38:59:
                    ca:69:96:9b:95:28:2e:c0:73:14:ed:f6:f0:84:f3:
                    1e:c9:31:96:c7:df:fa:d8:9b:e7:5e:0b:fe:01:fe:
                    67:b6:ea:04:6d:09:53:1b:e2:66:3d:8c:94:ca:7f:
                    7d:d0:a1:c2:38:35:b5:d4:09:94:f6:db:8b:f0:b9:
                    75:11:cb:a3:c8:23:43:c7:94:94:e0:06:0a:36:c5:
                    17:81:9f:27:f5:73:d7:77:64:74:9a:a4:74:27:66:
                    f2:f2:82:a8:63:e3:e6:03:97:ab:97:ae:b3:56:6c:
                    cf:0d:12:57:63:60:df:3e:bf:72:f8:48:e0:bf:97:
                    93:e5:68:7f:9d:88:74:22:6f:d8:66:ab:34:96:b3:
                    86:8c:16:46:38:9d:62:66:dc:42:58:61:12:7d:15:
                    b0:e1:96:17:28:63:7b:4d:df:42:e2:8b:14:14:85:
                    58:64:5e:e7:13:c9:0e:cc:b4:02:39:82:4a:38:61:
                    2b:39:3e:48:4a:7c:78:d5:3d:71:8d:a9:0e:63:48:
                    42:4c:1e:8e:bb:9f:0c:c7:ea:ae:a7:8a:f4:1b:1a:
                    2d:3c:3a:eb:dd:51:8f:69:81:60:8b:a0:1d:05:c4:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A1:2A:14:84:4A:7C:1F:0E:C8:0C:3B:0A:F8:72:22:EB:38:47:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/1ee9ff1c-58ce-34e3-8434-ab9a8a4f4e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:79:3b:a5:e5:64:7c:9e:ca:e9:84:8e:9d:0e:f4:ce:79:84:
         b5:1d:2e:63:c6:b3:7b:af:76:f8:4b:86:10:d4:2e:fc:63:d4:
         bb:23:72:27:e6:7f:be:65:3b:c8:52:c6:65:12:12:5e:26:c4:
         f8:dc:4c:47:f6:62:88:36:1e:63:66:23:cb:d0:15:1d:f3:3e:
         6a:f6:26:b3:39:ef:7d:80:75:dc:e8:c3:bf:41:58:ee:5e:c2:
         51:bd:46:41:57:be:8e:44:24:98:f2:06:16:30:e1:bc:3b:47:
         16:5f:6c:f6:30:6a:8f:bc:92:ef:d3:f1:cb:b3:a0:68:ae:70:
         0c:ac:b4:bf:d3:82:fb:22:fe:1d:e4:14:ae:df:92:cc:b2:c2:
         d8:25:da:8f:30:64:48:36:40:ee:fa:a4:84:94:72:93:8f:55:
         51:a9:4c:b3:76:fc:82:57:bf:f7:4d:be:5a:d7:f4:eb:27:ff:
         14:2e:42:ba:f2:08:d5:fd:d3:5a:56:ce:03:0a:76:15:0e:d6:
         f9:d9:38:88:12:cc:3a:08:c9:ea:1a:fe:e7:da:e1:98:90:96:
         63:55:00:83:a5:c0:67:c2:8d:4f:ee:2b:55:8d:98:71:2d:53:
         70:c3:98:55:60:d8:81:5c:c4:25:ed:86:c1:21:f2:36:e2:c8:
         99:3a:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:21 2025 by rpki-client