Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
File:                     905b2441-7479-30ff-970e-b1f710dbcbbc.roa (raw, json)
Hash identifier:          +cnlJaRCATDV8KPxc/RiZRiElpQJGv1jmhtWKdV/ynk=
Subject key identifier:   D5:BD:58:F1:7A:AF:3A:83:F7:F9:97:37:1F:6F:72:A1:A8:15:F6:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B35B60BAA4447D08D0EE44F0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        2001:569:6fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:60:ba:a4:44:7d:08:d0:ee:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=4baacc50-ddc2-4a5d-9b97-d899c1538f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:9f:87:c2:22:b5:f8:dc:93:82:04:8b:ca:
                    a3:a3:17:7d:4e:bb:da:6e:16:c4:c9:c5:64:93:0f:
                    50:39:f3:46:16:24:93:83:02:f3:bc:61:ef:b4:df:
                    d3:26:36:16:36:45:d9:ec:16:7a:22:d6:c3:f7:0a:
                    7c:03:9b:88:a8:07:5a:92:47:cb:50:26:8e:0f:c1:
                    41:21:48:62:9e:47:0d:cc:51:c0:ea:39:b1:48:60:
                    55:4c:45:ba:19:fd:2a:6c:fc:85:41:fd:26:c9:68:
                    20:64:0a:a2:fa:c4:29:53:ca:57:d6:45:c6:ac:73:
                    69:4b:97:cf:39:6b:aa:93:09:e5:83:87:06:de:bc:
                    18:59:ab:bb:50:fb:c9:51:75:98:37:21:fa:d2:66:
                    52:50:34:d1:ad:5e:f5:45:a7:0e:e6:69:94:75:fb:
                    b6:06:28:7b:1b:e3:11:e8:9c:85:5d:5d:08:7d:13:
                    a9:3a:3b:3f:eb:84:98:9e:0f:61:4d:a2:c1:2e:04:
                    15:10:08:d9:2f:11:14:92:af:ab:bd:4b:f4:0c:62:
                    06:74:1f:63:b5:54:fb:89:9e:3b:7a:eb:53:51:d7:
                    98:c6:64:51:6b:b3:6d:80:a0:67:29:01:96:f4:69:
                    16:34:c8:4e:ac:84:9f:3a:85:ad:5f:8d:1e:87:1b:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BD:58:F1:7A:AF:3A:83:F7:F9:97:37:1F:6F:72:A1:A8:15:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:6fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e6:d3:13:7a:22:70:bc:01:17:e6:c5:c9:01:c6:80:de:5d:
         f0:a3:c3:38:12:4c:5c:81:ac:f0:84:d7:74:82:09:92:5f:55:
         9d:60:8c:25:cc:a5:57:48:55:4d:07:0e:cc:fe:be:03:d8:ec:
         36:76:3b:8e:68:70:9e:66:f7:e1:c4:09:ed:2e:f7:51:7b:8a:
         28:da:ea:7a:d9:14:7f:fb:9b:ec:c2:48:eb:68:8d:76:d2:9c:
         8a:9f:2d:10:e3:80:37:f2:e5:47:41:0d:13:9d:27:1b:ef:39:
         d2:74:2b:8b:4f:45:18:f1:09:70:c1:a3:a8:06:fe:ee:8a:36:
         76:14:7b:db:c8:e0:02:78:9a:0b:d8:43:fa:da:0d:f0:52:3a:
         ab:fe:05:4d:de:23:44:23:95:d4:6e:20:e7:82:28:1b:16:06:
         8f:fb:03:a4:b1:9c:55:6f:6d:6a:d5:28:42:8c:5e:5e:a4:ad:
         5c:97:31:13:54:1d:87:b7:9f:0e:84:a7:df:20:09:3a:0b:76:
         6a:28:c6:42:42:e6:c5:6f:97:b5:01:09:a1:ff:00:18:91:4e:
         4b:ca:88:ba:89:e5:8d:1d:9b:fd:d5:9c:ed:9e:bc:ac:31:04:
         a3:5c:33:82:81:48:2a:33:a4:a0:ff:2d:af:83:4b:4e:c1:0f:
         6e:1e:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:13 2025 by rpki-client