Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa
File:                     c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa (raw, json)
Hash identifier:          H2P/SlNzI+KRurcJYFFfucRB9LiRoUlH6azBOwRtqcM=
Subject key identifier:   3C:E0:A7:84:1D:2F:54:74:1C:41:1F:2C:5E:AD:50:C3:2B:85:51:AE
Certificate issuer:       /CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
Certificate serial:       010D0C9F43285848AFF6548F0B945439199D3E00
Authority key identifier: C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa
Signing time:             Mon 27 Jan 2025 20:49:40 +0000
ROA not before:           Mon 27 Jan 2025 20:49:40 +0000
ROA not after:            Sun 27 Apr 2025 19:49:40 +0000
asID:                     400653
IP address blocks:        2607:f470:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:f6:54:8f:0b:94:54:39:19:9d:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
        Validity
            Not Before: Jan 27 20:49:40 2025 GMT
            Not After : Apr 27 19:49:40 2025 GMT
        Subject: CN=85e23656-6f4b-4bda-90c9-f14f9b13bafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:90:c5:53:3f:6a:d5:aa:3c:b1:0e:64:08:
                    ee:88:95:77:f2:74:bb:f6:31:a4:82:b4:81:c9:8b:
                    61:49:57:40:4a:e7:ca:fe:0a:0a:d7:1c:8e:c6:71:
                    24:5b:6e:6f:1c:f2:c4:d5:70:f3:83:a0:3e:cd:d4:
                    90:10:c6:38:dc:51:ac:9c:f1:86:6f:36:5c:c1:ce:
                    d4:c6:95:a3:d2:88:0b:90:67:29:a9:ad:14:9f:11:
                    ac:55:09:e5:89:d2:58:e1:56:e8:22:13:90:67:59:
                    56:36:23:cc:86:93:8f:fd:11:3c:4a:49:44:52:f2:
                    6f:36:1a:1c:f6:f0:1e:10:21:7e:16:78:98:a9:36:
                    1d:61:30:06:fb:4e:3f:a7:27:b7:22:90:29:c8:ce:
                    10:e0:98:8c:c3:fa:35:24:c0:a0:7f:13:76:4b:00:
                    5a:fb:04:b0:3c:83:62:88:b9:31:9e:ad:39:f6:d2:
                    f6:2b:ae:ee:98:71:15:9f:cc:fa:88:47:ed:4a:f5:
                    a0:37:73:0b:99:6b:5e:81:64:c9:9c:28:7d:17:65:
                    f0:e5:f9:c7:78:85:84:42:fb:df:f7:4e:e3:e2:b6:
                    9f:d8:e2:3c:20:ea:0d:3e:a2:bd:a0:c5:14:1a:c1:
                    ca:12:68:28:cc:9e:d1:10:98:cd:98:fe:5c:fc:74:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:A7:84:1D:2F:54:74:1C:41:1F:2C:5E:AD:50:C3:2B:85:51:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f470:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:6a:b3:83:61:e0:09:a2:4e:e4:1b:ef:73:53:69:57:ea:
         8f:ab:49:15:ca:d8:8f:a6:43:71:bc:11:77:33:c0:49:dc:cb:
         9f:5a:95:84:83:1c:91:b3:01:5e:8b:92:ef:51:aa:58:7f:d9:
         78:a5:ba:8d:32:cc:60:0e:9f:0e:dd:73:25:f1:20:30:3f:03:
         43:ce:61:4d:9a:f7:99:b7:29:b4:01:90:de:f5:28:79:72:1e:
         c1:ed:93:86:d7:15:e6:29:5d:39:f1:7a:4b:9e:e5:48:19:a2:
         73:0c:a1:b7:82:f4:2a:e2:b3:8d:b1:4b:24:28:97:87:69:33:
         3f:8c:dd:88:0f:94:12:ce:f0:b5:ce:38:d4:2a:bd:ce:95:1e:
         8c:d8:9f:50:78:6d:6d:10:7d:20:1d:95:ba:9b:4c:a3:71:f0:
         00:ec:7e:a3:de:56:25:3a:44:42:83:fc:d4:28:42:2e:1c:66:
         2e:d8:5f:46:5a:8c:a5:4a:13:b0:56:2a:d0:4c:e6:dd:12:d6:
         cc:85:2e:e2:09:03:a2:96:71:36:9e:f4:7d:fd:3c:54:7d:65:
         9a:62:ed:db:01:d8:89:39:73:98:3d:23:0f:1d:30:fa:52:08:
         cd:c7:6d:18:a3:44:bd:d0:52:df:af:46:34:39:e0:72:03:c9:
         4d:f2:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:51 2025 by rpki-client