Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
File:                     821ceb12-8191-30c5-81e1-ac603feb60b8.roa (raw, json)
Hash identifier:          jvNT+q0l6JUVvcqTYT5bFKurzea3Y2VRKGy5aqnmEd8=
Subject key identifier:   F5:2B:DA:7C:48:64:CF:D8:A8:A9:B3:E0:9C:04:02:59:BA:BB:B9:54
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858493ED3D0ED269273FA04009180
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     32780
IP address blocks:        2606:2e00:8007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d0:ed:26:92:73:fa:04:00:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=b370cd08-1e35-4271-9a51-fa91f3c1c05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:98:fe:09:86:57:56:d9:63:f6:39:7e:4d:
                    59:89:67:db:24:b1:69:bf:b9:28:39:2e:e3:5d:24:
                    00:95:d9:0f:0a:3e:f5:f7:7a:78:12:f1:4b:d2:9c:
                    b4:13:1f:34:02:57:bd:e3:cd:23:91:9c:d5:b4:a0:
                    06:d2:c2:58:88:e0:68:ce:7d:4a:36:30:4a:91:9c:
                    5b:3e:16:3b:83:ad:3f:e7:e6:e4:e1:41:28:92:de:
                    b4:b7:88:b6:89:e3:66:10:7b:1b:c6:1d:a8:62:1e:
                    68:01:af:db:68:ed:73:d2:49:8e:68:34:f2:b8:46:
                    aa:cf:66:28:ea:0c:5a:f8:9c:f6:27:6d:06:ba:51:
                    ad:7d:d2:c1:a0:16:db:c8:32:9f:44:e9:2b:a3:b6:
                    6f:89:6a:98:ab:45:a9:5f:8f:ff:3d:ac:db:2c:a0:
                    be:19:56:58:57:2d:cc:d3:57:cc:6d:df:4c:e3:b8:
                    dd:54:f5:97:95:07:d8:63:91:ab:cd:1a:d2:68:45:
                    6b:ee:c4:a7:9d:80:0a:cd:e2:38:72:06:03:d7:61:
                    5a:6e:69:1b:3a:e9:6a:39:c0:e8:1a:41:b0:d3:ac:
                    32:bc:91:c0:bc:28:e3:d4:95:c3:08:8e:ca:c7:a6:
                    28:3b:f4:be:c0:9e:70:b6:b3:a6:4b:09:cc:c5:df:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:DA:7C:48:64:CF:D8:A8:A9:B3:E0:9C:04:02:59:BA:BB:B9:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/821ceb12-8191-30c5-81e1-ac603feb60b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00:8007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:85:d8:10:fc:fb:99:0c:14:2d:cb:5c:d4:2c:8e:71:d0:bf:
         ff:cb:2d:9a:36:e0:7b:24:00:bb:18:ca:40:c2:75:0d:1f:c3:
         73:b5:7a:a5:e5:96:33:e1:0f:fb:c2:17:15:e6:04:ba:ad:b1:
         3b:5b:15:42:35:f0:f9:46:a0:0e:0a:10:f0:2f:f2:7a:3a:9d:
         89:a7:49:7c:d2:9d:42:b9:9b:09:a2:72:59:85:fd:69:e1:59:
         65:00:42:71:2c:b6:49:f0:50:83:82:6c:2f:1f:db:7c:f4:62:
         73:af:9d:7b:b8:e5:19:24:e8:bb:0a:37:9f:9b:f2:3b:25:eb:
         29:15:6f:d5:cb:73:a2:ed:43:43:74:92:df:e6:45:31:63:18:
         e8:20:3f:62:3e:48:f5:46:1b:d6:1b:1f:3e:19:c3:54:75:5c:
         78:ef:4e:56:dd:ad:5a:bb:50:76:29:9d:cf:6d:08:f6:0c:e1:
         42:c5:1d:ed:a5:b7:1c:b6:f8:50:ab:68:99:65:85:b5:0f:3b:
         2e:cd:a6:96:a9:1d:64:73:04:4b:03:d0:bb:bf:6c:9a:7f:d1:
         4a:ca:42:f4:b9:af:32:38:66:66:c3:fd:7b:90:93:b7:4a:12:
         81:66:95:20:49:98:0a:b8:49:f6:a6:8b:22:1d:a0:de:30:ca:
         64:af:42:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:39 2025 by rpki-client