Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa
File:                     63557a11-1132-331f-b85a-320f32aec529.roa (raw, json)
Hash identifier:          gi+wyrXiydoneb4OZHmI/71kx1/paLCsAbN+D00/76w=
Subject key identifier:   B2:E7:D4:FA:A6:88:F3:59:29:A4:C3:F4:AD:BE:56:E9:4E:16:1B:09
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F43285848BE862088650DF24D9C6B02A0
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     397720
IP address blocks:        2602:fdc2:200::/44 maxlen: 44
                          2602:fdc2:300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:20:88:65:0d:f2:4d:9c:6b:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=acdd4bd9-2fd3-4008-9b72-1562555e4641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:a2:1c:b7:92:cb:69:a0:80:26:57:c0:82:
                    30:83:d3:b0:34:7c:e1:77:f9:e7:e9:ef:bc:20:67:
                    5b:e8:3b:c2:73:46:18:4d:e9:8f:d7:14:4f:2f:a0:
                    63:92:30:fa:d1:51:48:26:be:f4:b9:40:03:2f:bf:
                    64:ea:52:3f:33:62:1a:e8:11:c1:a8:9f:3f:fa:6b:
                    71:dc:1e:8f:ae:2e:4a:ba:4b:ab:f7:dd:a6:48:5c:
                    8c:a3:f8:55:43:e7:72:cf:5f:8a:ea:78:50:57:88:
                    c6:bb:95:30:65:87:24:c0:fa:22:1a:4f:b9:f6:13:
                    26:b2:e8:e7:d3:90:fc:e0:55:16:65:e4:d2:d3:ad:
                    5c:ad:c0:1f:ca:6a:0b:64:dd:71:f9:74:68:b7:24:
                    c8:ea:67:b6:eb:62:e0:0e:f0:24:91:3f:50:d3:f0:
                    23:55:5f:eb:b1:30:a6:f5:ce:ed:d8:58:27:8d:5f:
                    7c:5e:b9:2e:e9:20:19:38:06:52:28:5e:bb:f3:66:
                    cc:89:f7:0c:5c:19:fd:fb:72:c9:2a:e3:17:92:11:
                    64:8f:5f:17:3b:20:5a:10:5d:1b:10:29:1e:4f:ee:
                    f3:21:04:6b:cd:c6:09:14:a1:d3:6f:30:c4:39:a2:
                    07:a6:96:b6:8c:d9:f0:86:33:99:4e:45:be:5d:c4:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:D4:FA:A6:88:F3:59:29:A4:C3:F4:AD:BE:56:E9:4E:16:1B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/63557a11-1132-331f-b85a-320f32aec529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdc2:200::/44
                  2602:fdc2:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:01:34:20:0f:99:f1:77:bc:d4:a3:15:da:86:c2:88:cb:fb:
         a6:f2:7f:a5:75:c1:de:22:50:be:7c:04:d4:21:d8:a3:29:85:
         3c:0b:6e:e2:f9:ba:fe:39:f5:9e:06:66:87:2d:81:65:70:fa:
         d7:f0:c4:68:ee:84:a7:db:bf:97:4c:a1:90:4a:eb:f2:a7:74:
         6b:e6:8f:b2:59:4b:cd:9d:23:00:36:ec:ae:b1:dc:9b:af:a1:
         13:21:97:df:61:6b:4d:e0:3e:0a:5a:fe:a5:d5:4c:3b:18:79:
         e6:d9:73:4a:97:72:ca:65:73:fb:d6:e1:2e:b7:3a:a8:b3:a7:
         a2:ea:19:d3:68:57:08:52:bd:e1:88:12:19:3d:ae:67:3f:d9:
         93:3c:17:a6:8c:e2:d3:c1:4f:11:c4:c7:d5:0f:ac:bb:e1:55:
         c2:9a:52:86:53:2f:18:e1:65:b4:43:10:25:cd:c8:df:06:d2:
         dd:24:fb:5f:da:b4:bc:c4:b7:b0:7f:55:b7:e9:29:fe:f1:ad:
         a1:0e:4a:e0:64:22:8b:7a:a7:a1:42:b7:9f:31:fd:45:3f:87:
         2d:85:fb:e0:95:45:c0:49:ef:f7:63:23:c5:28:0b:04:4f:bd:
         88:28:e3:6f:be:b3:de:0e:8d:e6:14:95:18:ad:50:76:1a:55:
         71:52:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:47 2025 by rpki-client