Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
File:                     0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa (raw, json)
Hash identifier:          xd49yG3uTwHcRioTS/o8pIyrcwBmTLEvCWnlgDxCVcI=
Subject key identifier:   A4:40:85:0E:30:27:47:FD:E2:C4:95:F0:D0:1C:AD:C4:54:85:CB:4B
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BD57AF98A6507A15C4800
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        2600:a00::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d5:7a:f9:8a:65:07:a1:5c:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=6844a619-74fa-41c1-966a-1cc34d89c30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9f:60:a1:f3:75:42:ec:43:3c:82:c4:94:35:
                    f0:38:dd:22:3f:79:d5:b3:2d:43:11:eb:a9:5c:d1:
                    d4:cc:67:ed:4a:3e:f9:91:c4:41:02:25:a9:79:18:
                    fe:a4:58:75:94:6d:a3:06:b5:6b:57:ea:1f:31:8e:
                    f6:4d:cd:2e:76:3e:79:ed:18:5f:3f:ec:a8:61:3b:
                    d7:4c:4d:e5:8b:5a:d4:89:7d:fe:48:fc:b0:f2:11:
                    c2:02:9b:cf:44:91:b7:61:47:3d:e3:23:32:85:9a:
                    d3:38:db:5c:5c:e8:3d:e0:5d:5a:7d:7a:c1:52:3c:
                    78:9e:cc:47:73:44:21:83:1e:49:a4:92:ec:54:99:
                    5d:8b:1c:21:c2:4f:e1:17:29:4c:7a:23:82:58:f1:
                    7f:e5:4d:13:b0:c6:e8:54:49:ff:75:5f:ff:d2:50:
                    40:e9:15:33:41:96:bd:88:f6:e4:32:c1:20:84:eb:
                    ac:ce:33:c3:0a:b2:b8:c6:4a:87:93:72:1b:d8:9a:
                    49:63:1f:2d:c0:4d:24:07:e6:06:12:f1:d8:ad:72:
                    6b:7e:40:ba:a6:3b:f1:2f:41:c6:c7:1e:65:3c:63:
                    a2:bb:3f:72:2b:ac:01:8f:3f:ba:d3:29:c5:2a:a1:
                    f4:af:df:08:5e:84:94:95:26:45:9d:9b:b5:23:da:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:85:0E:30:27:47:FD:E2:C4:95:F0:D0:1C:AD:C4:54:85:CB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0f9ebc90-bef1-3ebc-ae64-0405a50ac7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:a00::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:42:59:5f:d5:14:f1:e0:e6:e6:a3:1d:97:e9:e5:b4:59:
         49:e6:47:5b:a5:df:85:bd:3f:e8:a0:31:ce:c5:4b:bd:2f:d2:
         71:df:1d:c2:8b:5c:f4:7b:ca:ab:34:bc:ad:27:2f:df:7a:3d:
         99:02:ef:ec:cb:87:44:54:16:a0:bd:7d:ab:bf:9e:81:52:54:
         fc:bc:cc:ca:13:b7:2b:07:29:2b:b0:64:ac:bd:4a:f2:d2:30:
         c5:78:22:64:8d:5a:0b:e3:83:58:e0:51:d2:52:c4:24:16:4a:
         b3:b6:fa:d5:e6:84:de:4d:85:c6:39:b3:f2:3c:c9:d2:23:eb:
         30:aa:f5:41:ce:57:d8:d8:45:3d:dc:09:5c:b2:ec:cc:14:65:
         1b:ac:ff:a2:59:4a:21:cc:9d:55:70:59:08:61:e4:48:70:05:
         5d:9f:43:da:98:61:50:af:4c:31:e9:08:af:b3:a7:b5:42:a0:
         2d:06:ca:c3:c9:b7:28:4d:20:f1:79:b7:0c:67:b2:92:0e:01:
         68:85:bf:11:fc:9c:f4:1e:99:0f:f8:5c:f3:ca:04:e9:73:9d:
         f1:cd:24:17:0f:9b:9e:9b:0e:b6:ea:5e:a9:e6:3d:39:b2:8f:
         29:48:63:6a:41:5a:ab:b8:0c:f1:eb:93:da:35:b8:d5:ec:41:
         db:38:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:32:12 2025 by rpki-client