Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa
File:                     2cf9cd10-d56a-3e13-884e-dd111861228b.roa (raw, json)
Hash identifier:          gKZ41AEic+FTuw0y2z5h7YiSjDlyKcSeBC8kOSMPcX4=
Subject key identifier:   D9:4A:04:B2:F6:84:CF:1B:CF:6A:71:63:6F:0D:2F:D1:70:8A:A1:F3
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584908815B537400B91736CD3400
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2602:80a:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5b:53:74:00:b9:17:36:cd:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=fe4b4bf8-cc31-4ca8-9d18-79807645c448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:c3:de:4e:61:99:bf:47:18:69:a2:74:aa:
                    07:a6:3b:46:1e:4b:03:ce:4b:4d:18:aa:01:a3:0f:
                    c1:fb:78:15:d3:d7:f0:c3:80:de:04:0a:c6:6f:91:
                    34:d3:b6:aa:94:e3:d1:f9:72:47:17:79:d6:ce:a2:
                    5c:40:53:ef:22:ee:0a:d8:2a:fa:46:28:34:0b:3a:
                    fd:34:19:bc:1c:8c:3d:19:c4:8d:4b:57:10:8f:b1:
                    82:de:a2:39:60:8c:d6:92:64:29:88:02:3a:60:94:
                    c3:12:b9:da:60:5e:02:de:2c:3f:71:dd:e7:ac:9c:
                    b6:3b:2c:be:98:9c:64:6a:22:84:aa:e9:a6:1d:b4:
                    39:80:26:7d:d9:76:fa:7d:87:4e:c7:4f:ca:d7:90:
                    fc:26:14:0c:41:28:6b:a1:9d:76:e5:06:1c:d7:81:
                    81:de:09:58:c7:7d:e5:68:83:28:5b:3f:60:be:c0:
                    19:c7:98:70:cf:b3:7c:aa:35:00:5e:f8:8c:c7:a6:
                    29:2d:3c:a0:36:78:dd:88:2c:c1:55:d9:ce:e8:5c:
                    9a:59:6e:1d:8a:16:a2:10:5f:f1:bd:26:93:8a:69:
                    d3:fc:5f:25:52:f9:bd:e1:bc:12:c2:5a:da:02:6d:
                    fd:6f:3f:7e:c8:40:b3:d7:cc:8e:35:29:dc:dd:53:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4A:04:B2:F6:84:CF:1B:CF:6A:71:63:6F:0D:2F:D1:70:8A:A1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/2cf9cd10-d56a-3e13-884e-dd111861228b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:06:e9:cd:69:e8:0f:4e:11:07:67:f5:bc:8f:d3:cc:2c:59:
         17:3c:7b:58:d4:2b:80:b5:6d:6e:5b:dc:1b:34:7c:95:64:3d:
         a0:98:09:91:3d:44:e5:c3:c7:e7:40:f9:97:5f:e5:b0:7c:55:
         ad:9c:e8:80:49:5e:45:64:50:75:6a:fb:07:ab:99:30:0a:93:
         4c:ea:8e:35:cb:ff:cd:7e:65:d6:5e:72:b8:07:6f:14:95:ae:
         ea:82:57:a9:88:b8:57:33:24:02:18:49:d3:3b:94:4d:60:aa:
         a4:d8:32:65:46:8a:50:b1:65:c9:ed:e5:fb:c6:24:9e:b7:9f:
         cd:2c:39:34:8e:8b:09:33:92:6c:7c:4e:35:5c:b0:1d:60:1d:
         b1:61:2f:42:54:4e:58:78:1e:25:fd:68:1a:22:e7:2e:c1:fc:
         b3:5b:7a:fb:2a:ec:33:62:27:9b:e2:ff:35:48:2e:81:b0:7d:
         d0:45:46:21:ae:46:32:7a:30:b8:01:b5:f7:46:75:e8:c2:62:
         99:14:ca:6e:d0:d9:a5:d1:8c:d6:a3:0f:94:9f:0e:54:98:72:
         9f:99:a2:e7:1a:42:7f:f7:05:6d:ed:97:98:4d:cf:1f:c9:36:
         22:21:06:19:72:45:92:f3:c9:58:4b:5e:95:2c:84:26:e8:3d:
         fd:1f:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:39:21 2025 by rpki-client