Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
File:                     efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa (raw, json)
Hash identifier:          VQTHYO9M6o+cnr+8COLi6Re/vIORpvYljkEhjhwUObE=
Subject key identifier:   2A:6E:80:88:14:8E:67:20:D2:30:33:2C:F1:30:36:19:76:31:37:D3
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F4328584819CFC95EFDEFE4C5963A3040
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        2602:808:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c9:5e:fd:ef:e4:c5:96:3a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=a8a1fb13-ec96-42bd-90aa-8bb70a9ffa1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:d8:0d:c9:8e:98:b1:6d:4a:78:76:79:7e:
                    74:f4:cd:41:9e:cf:a2:2f:6f:5a:f8:55:c0:12:d0:
                    17:10:d6:25:71:71:01:fc:c2:f5:fb:4a:85:0e:da:
                    5e:52:25:fd:4e:3d:9d:54:20:69:fa:4f:61:b9:b2:
                    1e:6c:2a:a3:c0:cd:eb:d7:31:a0:ea:4e:a0:83:da:
                    b6:aa:bf:ad:66:41:e2:7b:e1:7a:37:28:4d:00:e4:
                    74:5a:51:97:16:28:64:b6:38:c6:d2:25:3e:a2:97:
                    a0:57:e0:ff:3a:b6:9d:1d:81:ab:15:6e:a1:7c:2b:
                    d1:64:87:5b:fd:70:0c:8f:24:94:d5:02:2c:69:73:
                    81:5c:09:d8:a9:0c:a9:a1:ee:f4:7e:87:46:57:90:
                    b7:2c:6c:79:d2:ed:63:ab:b9:ee:1c:ca:50:f8:8b:
                    1a:89:f0:87:99:27:4c:89:04:92:46:97:e7:84:9b:
                    2e:77:63:f7:08:a3:3b:9b:78:b3:ad:36:2a:92:1e:
                    f9:bf:ab:2a:26:6b:04:79:7e:66:94:7f:bf:35:eb:
                    a2:9e:69:b7:82:1e:6d:f9:0f:2c:df:ca:de:18:e0:
                    2f:68:05:25:36:87:8a:ff:4c:42:9e:45:d0:0a:b6:
                    33:c8:57:7e:86:6e:4f:fb:77:23:0d:8c:38:3b:ec:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:80:88:14:8E:67:20:D2:30:33:2C:F1:30:36:19:76:31:37:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:1f:ca:f5:f6:41:f7:be:c7:56:e6:8f:d0:4a:85:0d:0e:
         62:b1:45:59:6a:86:bd:a7:79:82:a6:97:e9:74:0b:43:f7:31:
         f4:b3:1e:97:2a:d1:20:ae:be:40:13:14:4d:fa:48:11:c6:01:
         5c:bf:b1:3e:48:9e:9e:a3:0a:96:96:2f:5b:e8:3b:1b:53:9a:
         02:c2:42:25:5c:47:76:eb:f1:08:71:ea:e6:68:dc:3f:3a:2e:
         78:0c:b8:81:60:3e:97:df:7d:f3:09:bf:49:37:63:04:83:b1:
         21:9b:83:c7:4e:d5:3f:d6:df:b5:78:60:ca:a5:50:00:60:83:
         ef:b9:3b:17:6a:5a:f6:60:5e:3b:42:95:86:c3:32:0b:6e:eb:
         37:8e:d2:5b:18:55:3c:ec:09:17:47:4b:8a:eb:4f:07:af:73:
         35:0f:63:33:76:6c:32:86:01:4e:21:98:4b:93:e1:cf:c2:bb:
         c9:c2:d9:e6:75:19:f8:5b:37:2f:f3:79:6b:cf:08:64:1b:82:
         a1:5d:a5:ec:b3:fc:69:b7:1c:db:b2:bc:13:8c:80:7b:c4:b1:
         f9:98:e5:f3:63:76:98:db:6b:8b:12:e4:3d:6d:43:47:66:26:
         d7:e8:5c:b0:75:2b:3b:23:b5:3e:90:ec:59:be:03:5e:3b:a9:
         4c:40:09:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:34 2025 by rpki-client