Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa
File:                     d05608e1-ad8f-3030-a16a-7896f5a0d319.roa (raw, json)
Hash identifier:          JrGZzBWHIGGxIN8PFNc61kGdSz3q6Hqlj94qTp7xtQ4=
Subject key identifier:   83:B1:F4:91:F4:4C:7B:F7:9B:39:CA:87:8E:94:8E:0C:94:CB:0B:AC
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858484EDAC406FF066974146A5E18
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     398493
IP address blocks:        2602:fd37:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:c4:06:ff:06:69:74:14:6a:5e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=d7066454-2656-43a5-ae3b-372e035aaeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:95:17:a7:07:d6:4a:70:ea:51:8c:35:7c:
                    49:89:7d:e8:81:bf:7a:40:37:d1:74:c3:d6:2d:45:
                    ff:1e:4d:7a:21:7d:a3:e3:4a:c5:7e:18:a0:be:85:
                    d3:be:65:42:49:47:10:c5:49:e3:e2:5a:1b:33:a3:
                    04:53:26:a0:f4:cc:78:c8:7a:a0:bb:ed:ae:d7:cb:
                    b8:ae:d0:30:32:42:42:25:76:5c:2b:c0:2c:a7:e1:
                    25:c1:25:94:22:72:cd:6c:6e:45:4c:aa:a9:9e:96:
                    79:a9:9e:bb:40:70:a3:78:57:03:7c:4e:c6:09:de:
                    d2:f7:e3:c7:07:61:1e:67:ce:7f:2c:f8:72:e6:ed:
                    d8:32:a8:4b:54:f6:08:1d:8b:7d:6b:8c:7c:eb:26:
                    f3:8f:f8:19:ae:e9:90:2c:a8:3e:b1:71:3c:80:d5:
                    be:f5:cc:75:be:71:8a:9a:28:ca:99:7d:b9:e8:fb:
                    9f:ec:69:46:3c:ea:f9:27:57:ff:38:f7:ee:ee:e6:
                    d4:f8:1d:a4:c2:a7:ff:09:20:9a:35:4f:ae:7f:17:
                    5a:15:26:26:92:92:6b:ad:f6:c1:42:73:f9:d6:e0:
                    c7:42:7d:fd:75:bc:26:65:9e:ed:5f:57:f9:ba:1f:
                    b6:4f:71:e2:3f:58:2e:c6:72:86:65:1d:a0:c6:96:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:F4:91:F4:4C:7B:F7:9B:39:CA:87:8E:94:8E:0C:94:CB:0B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d05608e1-ad8f-3030-a16a-7896f5a0d319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:33:b3:4e:b7:c1:95:f2:49:96:d1:c6:65:db:41:b9:e1:
         2b:4d:d8:42:20:cf:2a:ac:5b:92:d5:20:e0:f6:45:f2:d3:36:
         85:db:0d:a1:45:12:ad:f5:7a:86:6e:c0:d1:c5:0c:f6:25:f9:
         64:df:56:57:34:79:8c:47:fd:84:48:b0:93:74:f1:b4:82:66:
         28:7b:87:8e:da:69:30:0e:f8:1e:8e:22:e6:5f:4f:08:5d:7e:
         4a:1c:00:66:58:ba:cb:19:5c:a4:6e:98:03:e1:76:66:34:f6:
         21:b2:9b:bc:cf:19:f7:a1:02:92:c3:3e:82:10:ea:2c:75:b3:
         21:e0:02:ce:18:9f:da:28:e4:47:2b:c7:d0:27:90:73:dd:e5:
         7e:9b:e0:4d:dd:a8:45:7a:0b:08:e7:88:86:1b:8e:e9:48:f1:
         55:b1:eb:14:0b:39:79:33:2d:c7:a9:ad:da:d5:0c:66:55:77:
         5e:4b:b6:8a:25:82:7d:a6:23:f3:31:c0:bb:38:94:7c:55:d2:
         b0:55:57:1d:f1:fb:6f:81:20:34:06:33:6f:29:bc:e1:a5:9d:
         ba:20:7b:a6:ce:8d:dc:57:55:73:97:52:44:e7:73:70:30:bf:
         64:34:0c:7a:f2:e7:4d:92:39:83:8e:a2:56:ed:19:bd:ab:f1:
         f7:93:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:28 2025 by rpki-client