Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa
File:                     9fd311c1-e770-39bf-a936-c5c989cd234e.roa (raw, json)
Hash identifier:          bmWaF2JvL6MLNnNkaByfFbHP5xEvdtBUJZZi9YY/gQQ=
Subject key identifier:   40:A4:6A:98:D5:9D:08:65:BA:97:88:EB:8F:83:84:8A:FD:D1:51:BD
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F432858494B640BB0AB33750D2F10FB20
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     225
IP address blocks:        2604:4540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:0b:b0:ab:33:75:0d:2f:10:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=7c709dfc-9e81-485a-9a8c-99b634e265a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:d9:7c:1f:ca:b7:5f:3b:e7:86:7f:78:b2:
                    68:61:dd:92:6b:00:7a:f1:3b:83:78:c9:47:75:32:
                    43:66:dc:5a:cd:79:1b:79:49:0a:37:5f:2a:a2:da:
                    63:fe:69:84:1c:23:b9:ae:96:63:1d:f1:fb:df:a3:
                    cb:0b:9b:3c:c6:48:ee:71:9a:04:ed:2d:2e:3a:18:
                    8a:25:a5:85:58:0c:4a:09:d3:fb:ba:0a:df:d4:cc:
                    07:8e:1e:6c:54:c1:47:24:5b:e5:8f:59:7c:e7:26:
                    7b:89:71:7e:71:4e:56:95:2e:b3:8f:51:fd:61:de:
                    c1:b9:1e:56:3d:27:d1:72:b5:7f:6a:f7:11:e7:ac:
                    12:d5:b3:84:fe:91:c4:67:4a:7c:fb:0e:71:2a:a0:
                    f1:3d:58:f0:3b:de:ff:b2:f5:fd:78:61:cb:eb:a4:
                    f7:d3:90:ef:df:17:a6:91:4f:ef:8e:54:b7:69:61:
                    8b:9b:a2:84:f1:b7:87:95:35:bd:5f:dd:69:1a:4c:
                    02:c8:f9:28:23:f6:64:66:2b:3a:d9:2f:a3:b0:29:
                    64:0d:c7:36:46:ce:4d:62:8b:36:3e:a2:ab:d0:f7:
                    04:6a:af:93:79:d0:44:a9:c4:4b:1e:41:fc:66:be:
                    d5:8f:f2:43:14:f0:61:dc:80:22:90:24:3f:56:d1:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:6A:98:D5:9D:08:65:BA:97:88:EB:8F:83:84:8A:FD:D1:51:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/9fd311c1-e770-39bf-a936-c5c989cd234e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:4c:3b:17:4d:bf:e5:6e:35:5c:64:de:6e:4e:12:95:bf:
         88:3b:d5:df:91:d9:bc:8f:c0:fe:0a:81:01:a9:2d:14:c3:ea:
         5d:56:8d:5d:4c:94:86:96:b3:fa:b8:43:e0:39:4d:fd:95:7c:
         17:ae:d5:c9:54:31:79:d5:ab:a5:13:77:0a:4f:d1:32:d4:07:
         6e:ce:c7:53:8e:5f:98:10:3f:1e:ce:44:62:9a:e4:69:cf:f8:
         c6:b5:a3:5e:b4:d6:2b:4e:d6:6d:67:9d:80:62:2e:91:9b:6f:
         6c:a6:1a:1e:27:17:ef:6d:1e:71:9a:47:7c:5f:7c:2c:1e:52:
         c5:8b:c2:6a:a4:87:03:73:f8:05:c5:79:e4:4a:1a:b6:a0:53:
         89:5e:7c:aa:c8:45:da:83:86:6c:04:56:63:32:74:9c:f5:2c:
         05:b3:5f:ff:40:3e:2e:9c:be:09:f7:d6:fe:03:29:1f:30:d7:
         6b:31:cd:4e:bc:56:fc:a1:a1:d2:a5:75:15:eb:ff:ab:2d:b7:
         78:60:7c:0a:17:15:5d:11:fd:ac:32:cf:66:eb:3a:9a:9e:bd:
         f4:48:8f:e6:ae:a5:fc:8f:50:80:44:0b:aa:d3:ed:8c:52:c2:
         a3:84:f7:84:56:7c:5c:4c:5a:9d:7a:b7:5d:5f:c8:17:3a:b4:
         2d:8a:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:31 2025 by rpki-client