Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa
File:                     89193b55-7176-3da3-8ef8-2df1884a9a7c.roa (raw, json)
Hash identifier:          XTVgBdjWIZHu4mbg3GeVIe10COYNTfPIyZP+3Bo3DvE=
Subject key identifier:   15:F3:A6:A1:FF:05:AB:A1:C2:FD:A1:B1:D1:2F:15:F2:62:C1:E3:32
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F43285849088173A34FBEE4CC113B7900
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     48737
IP address blocks:        2607:b300:fd07::/48 maxlen: 48
                          2607:b300:fd08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:73:a3:4f:be:e4:cc:11:3b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=3efea5c5-6bb4-41e4-8577-f73c42a5d630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:b4:98:54:f6:cc:06:e7:d3:af:c9:2e:44:
                    12:c0:ef:9a:5b:9e:e0:44:95:54:52:98:78:22:66:
                    96:ba:cb:1b:77:f4:9a:92:a3:f9:6d:16:e4:1e:7c:
                    81:5b:bb:7a:d5:c7:c6:3b:1f:63:27:c5:2f:72:44:
                    11:22:1a:81:9c:62:02:b9:f6:fd:85:96:d7:b5:e9:
                    73:bb:c2:40:87:f7:e6:34:1a:d0:20:1c:30:20:b9:
                    d0:ee:74:65:ab:f5:e7:4f:f3:c2:cc:2d:d2:2c:fe:
                    07:9c:b1:3c:c0:6b:8d:6f:8f:1a:eb:b5:2e:1c:e9:
                    77:da:fc:bc:42:31:e6:be:f0:8b:c2:28:04:15:01:
                    6e:52:99:30:62:70:9d:6f:5e:28:e0:0f:15:41:92:
                    8d:ce:be:e1:ad:00:6d:42:ac:d2:ac:7d:f8:ad:53:
                    6f:11:7d:90:6e:dc:29:f4:12:a7:a6:9f:2d:39:13:
                    e0:59:c9:74:e9:b0:87:ab:81:53:ad:0b:22:50:10:
                    e1:90:e4:7f:78:5f:02:02:53:91:6e:ed:af:eb:e1:
                    bd:da:59:c5:83:03:0e:e5:13:f0:11:16:bf:cf:44:
                    47:ee:b5:8b:2e:75:8e:df:b6:e7:7f:70:15:99:5d:
                    c5:fe:80:43:a5:89:25:31:13:99:7a:39:e3:27:62:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:A6:A1:FF:05:AB:A1:C2:FD:A1:B1:D1:2F:15:F2:62:C1:E3:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/89193b55-7176-3da3-8ef8-2df1884a9a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd07::-2607:b300:fd08:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:55:f9:b4:8f:33:ab:e7:a4:08:6b:2f:88:36:e4:53:cb:d1:
         f3:5e:06:d2:33:30:81:33:ff:7e:78:77:bd:83:4a:49:b9:a5:
         f3:e1:8a:44:28:fd:3c:08:7a:3a:b0:f1:da:f8:68:e9:d8:28:
         b5:03:bd:c3:fc:19:45:0b:a1:c9:4c:9b:14:6c:a0:3e:3d:d1:
         f5:6a:d4:e6:ec:b9:e6:0a:b1:ab:50:bb:5a:9f:0f:70:90:8b:
         a3:ac:34:7b:24:5f:18:d2:32:ec:ce:b9:d6:96:49:63:1c:16:
         1d:90:04:fd:ea:a1:20:b4:4e:1f:2f:c9:ee:0d:86:f8:b8:d7:
         3a:96:50:88:86:23:8d:51:51:5b:78:93:96:71:8c:37:f7:a3:
         a1:68:7b:f5:b4:62:c8:e5:73:39:78:c7:96:91:9b:1b:81:7e:
         ad:2f:31:b5:d4:1d:00:15:46:be:f8:83:d2:6d:25:19:df:38:
         fb:38:7c:46:bd:c1:10:eb:32:17:a8:0d:1d:4d:4b:12:d3:65:
         6d:f6:cc:d1:06:f0:63:bb:13:06:06:a2:cc:0c:5c:39:2f:a3:
         29:85:38:9c:d3:7d:5e:d0:67:b5:5f:df:28:b5:9d:94:73:2e:
         31:b2:a0:b6:b2:2c:dc:a4:9b:65:55:77:e5:c9:00:54:8f:34:
         74:e7:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:05 2025 by rpki-client