Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/abdc58a6-2678-3713-8a6c-9355310bf749.roa
File:                     abdc58a6-2678-3713-8a6c-9355310bf749.roa (raw, json)
Hash identifier:          Qdq8lGkKxLF4Zb3F04TMXXbJiY7173Biz15dPb0BhIo=
Subject key identifier:   73:F9:EA:93:57:FF:9B:4E:5B:01:A6:7D:02:93:14:C5:2B:13:59:58
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F43285848E436718EF916A6FBF37D1500
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/abdc58a6-2678-3713-8a6c-9355310bf749.roa
Signing time:             Sat 15 Feb 2025 14:00:51 +0000
ROA not before:           Sat 15 Feb 2025 14:00:51 +0000
ROA not after:            Fri 16 May 2025 13:00:51 +0000
asID:                     22418
IP address blocks:        2604:eb80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e4:36:71:8e:f9:16:a6:fb:f3:7d:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Feb 15 14:00:51 2025 GMT
            Not After : May 16 13:00:51 2025 GMT
        Subject: CN=6cb961b9-2e3e-4f29-a58c-83ad24914a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:70:e5:04:7d:d9:50:b9:2c:38:89:c4:8f:
                    01:41:ce:7f:f9:3d:bd:a3:84:93:29:c8:a0:1b:08:
                    66:ea:8d:c4:c8:34:c4:6f:19:3a:8f:50:5a:a4:5b:
                    48:db:d5:04:0b:c3:d4:3f:e2:22:04:92:55:ae:61:
                    9e:03:6f:25:2d:a1:29:f9:be:e3:a0:57:60:5c:a6:
                    5d:18:0a:74:57:21:c8:00:bf:fc:ec:7f:6b:02:49:
                    ee:46:bc:45:ca:d0:6d:5d:71:5f:7d:1a:39:1c:20:
                    d9:ea:27:32:81:7c:6d:ff:fd:d6:4f:1f:e8:c8:68:
                    72:2c:ed:c5:ce:a4:89:a4:47:a3:74:63:35:2b:1a:
                    a3:2d:54:ae:0b:2e:87:d3:92:f7:2e:87:00:74:ba:
                    49:87:ac:da:5e:de:01:55:6d:5c:07:a4:59:b6:00:
                    f5:56:b8:f3:09:d4:ee:e3:2e:98:75:df:a6:46:51:
                    7f:71:ea:7c:84:e0:3c:b4:61:9e:04:9e:15:85:8d:
                    9c:65:85:35:27:5b:73:9a:24:12:30:6f:59:da:a6:
                    a1:fc:c2:52:57:22:b8:d9:72:4e:31:f0:7c:e2:dd:
                    2c:b7:6e:75:af:23:18:32:ad:df:d9:c9:4c:d2:02:
                    5a:eb:88:c8:cb:9b:c4:35:56:c3:6f:ee:7d:b0:21:
                    db:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F9:EA:93:57:FF:9B:4E:5B:01:A6:7D:02:93:14:C5:2B:13:59:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/abdc58a6-2678-3713-8a6c-9355310bf749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb80:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:06:50:c7:43:0d:5d:5e:b2:1b:ce:99:23:e3:2e:90:95:19:
         56:3c:0b:c2:f5:33:9e:7a:97:76:90:02:a2:13:de:82:e8:05:
         0d:2b:2e:f5:39:e6:13:7a:42:92:12:e4:3e:77:cb:bb:05:40:
         6d:11:50:15:e1:ca:3d:66:94:92:23:8e:91:7c:f7:2d:ed:db:
         7c:58:d6:83:d1:69:85:9b:bd:b2:5e:27:fb:1d:cd:4b:6e:f7:
         23:21:ef:57:c4:d4:86:32:7e:26:6e:f5:9e:bf:ce:3b:f9:19:
         a9:43:a6:36:e0:5a:8d:8c:9b:3f:35:ca:36:21:d5:3f:23:72:
         30:9c:ba:a8:d3:97:d5:d0:c9:29:5e:88:5d:2b:39:08:86:d7:
         b3:21:0d:45:dc:54:88:10:dd:e6:61:8d:43:68:39:cf:dd:b7:
         45:31:bc:fd:ac:ec:0a:14:49:3a:ed:c6:74:81:a8:03:71:ec:
         ea:a8:64:69:bc:15:49:30:4b:76:16:e3:58:a3:41:c6:1d:91:
         20:33:6d:84:da:da:3a:28:d3:32:74:3d:52:8e:48:65:d1:12:
         3d:1d:2e:14:a6:76:90:b6:76:a5:4a:f7:e6:6d:97:e5:1f:a8:
         7a:f3:63:c0:ca:27:97:97:99:6b:ca:47:b5:b2:da:9c:7c:19:
         d5:07:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:43 2025 by rpki-client