Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
File:                     1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa (raw, json)
Hash identifier:          E54feffIHKgrKuX8H7G93tARZkWW+NvAdOGhCS2zPYk=
Subject key identifier:   51:32:3E:94:7C:59:3F:1C:87:16:37:16:58:56:5B:E8:CC:01:D8:38
Certificate issuer:       /CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
Certificate serial:       010D0C9F432858494733E5395862F148A6B9A7C0
Authority key identifier: F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     968
IP address blocks:        2602:809:3004::/48 maxlen: 48
                          2602:809:3005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e5:39:58:62:f1:48:a6:b9:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=85370e6d-c668-49e7-84da-6c461f31ae06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:3e:61:a7:be:a0:40:bc:df:45:46:a2:de:
                    12:e5:50:d4:f4:e1:c1:31:0a:b6:59:5e:bd:1a:54:
                    0c:7b:eb:fe:a4:b3:07:57:7a:12:98:bd:47:4c:27:
                    1e:56:b5:37:c7:a4:be:47:e8:e3:5f:0b:fb:95:d3:
                    f8:04:86:7a:92:89:98:bd:03:88:8c:50:57:70:75:
                    66:61:49:9c:c6:2d:66:06:46:20:9e:7c:75:f3:07:
                    40:32:c2:01:3e:8d:d3:fd:6c:65:67:74:4b:12:3b:
                    cd:47:14:1d:f8:b8:fe:37:08:fe:b2:40:05:55:4d:
                    16:88:9a:b7:0d:61:43:cb:06:d2:64:d6:81:5f:fd:
                    97:0e:3f:f4:c6:aa:0c:c4:8f:71:e6:cf:ed:e5:57:
                    67:6f:2e:43:c5:c5:23:58:47:b4:7a:5a:a2:f2:85:
                    12:3b:9a:31:74:0a:30:42:c5:ab:df:aa:13:0e:d2:
                    f5:a3:5b:40:5f:e2:53:65:44:9c:f1:74:d3:36:38:
                    9c:c4:99:86:dd:4a:6d:e5:92:81:17:16:be:70:38:
                    d9:9d:2f:bf:1f:69:b4:bb:6b:70:4c:69:66:6a:e6:
                    6a:32:3d:38:ed:60:69:9e:5f:b2:f4:60:0b:6c:e6:
                    4e:1c:4b:24:38:8f:1d:cf:f5:b4:f0:d1:d1:f5:95:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:3E:94:7C:59:3F:1C:87:16:37:16:58:56:5B:E8:CC:01:D8:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/1d0ec1b5-ab7d-3cdd-b16c-fbaf52c6c834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.crl

            X509v3 Authority Key Identifier:
                keyid:F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:809:3004::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:9e:29:c8:d5:26:48:42:fa:1b:ce:0d:84:5a:15:2c:d8:
         f2:05:ab:07:f2:e2:1b:8e:25:8f:7b:a0:0c:3e:33:48:d0:56:
         b9:17:43:43:8a:de:41:48:3c:f0:4a:b3:2e:45:88:66:2a:06:
         e0:f7:a2:ea:57:5c:ca:00:bd:4c:0e:c5:b3:8a:fb:a4:97:56:
         96:9d:10:62:95:fa:26:95:90:71:6d:c3:cc:e1:13:fc:30:86:
         33:38:9e:20:96:25:7b:2a:3d:fb:13:88:f7:c6:35:c8:9f:f8:
         eb:90:66:06:3e:ba:a7:89:8e:b1:e2:44:a6:cc:29:09:4d:c8:
         10:89:09:38:2e:2c:c7:73:a8:45:f9:68:f3:a2:6c:60:9e:8a:
         f6:7b:d7:47:8e:58:e1:6d:30:82:f4:5d:6a:82:fb:0b:0e:fa:
         38:f3:88:57:65:48:de:c9:09:71:8c:d2:0a:13:d2:37:3f:5c:
         69:68:d2:b6:39:3d:d5:02:91:ed:9e:48:3d:30:5f:f5:ac:0b:
         d1:c4:a1:37:07:68:08:dc:0b:3a:aa:b5:20:ce:e3:85:ef:85:
         0e:7c:a0:86:c6:7e:f4:48:e8:1f:ec:c1:e6:f7:ff:73:62:0e:
         97:0c:ec:8d:a4:84:9c:98:95:eb:36:f2:9c:d6:21:7d:0b:44:
         07:a4:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:12:16 2025 by rpki-client