Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04d95c9b-3c3b-3141-bf2e-afeec9b5bd2d.roa
File:                     04d95c9b-3c3b-3141-bf2e-afeec9b5bd2d.roa (raw, json)
Hash identifier:          ZHzwmKLZ+WzJlD9vsNI9Ex8umWzEbSjuydNBmqDtYMw=
Subject key identifier:   DB:EE:B3:B5:3F:AF:4E:AB:B2:AA:45:D4:48:F6:D4:02:03:43:C7:45
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858480EA5016202D1154D538D0980
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04d95c9b-3c3b-3141-bf2e-afeec9b5bd2d.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     214258
IP address blocks:        2602:fbe8:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:01:62:02:d1:15:4d:53:8d:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=0f4f00aa-2627-4edb-afdc-22cb9b331b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:6f:a6:87:9d:e7:e2:1f:18:78:58:9c:cd:
                    1e:06:37:86:de:57:95:aa:9f:c0:19:98:94:89:20:
                    df:a1:50:87:bd:5b:96:2d:75:67:bb:b4:03:a9:42:
                    f6:a6:f9:ed:b7:b8:00:f2:af:0c:81:3b:95:a7:31:
                    a4:79:74:dc:f6:d9:44:fa:82:49:4c:e4:8b:ac:58:
                    19:68:a3:e2:36:81:a5:de:4f:bf:f5:b1:8b:97:38:
                    61:9c:8c:a4:2c:9b:1a:5c:50:2a:aa:f5:f9:f3:76:
                    11:90:fe:0b:8f:6f:52:da:b1:61:58:12:cd:99:31:
                    68:7c:3f:9d:68:ee:84:f3:d8:44:55:d1:50:9f:9a:
                    d2:b9:02:0a:99:c7:f9:2a:0b:78:fc:4f:74:f8:ce:
                    98:0b:3a:66:fc:f7:f8:b3:45:4c:d6:b8:aa:0a:39:
                    f3:06:df:78:2c:2f:c6:8f:c8:df:6c:95:6f:ef:21:
                    ac:60:e8:c1:48:55:4c:f7:f7:06:b3:17:06:37:b6:
                    75:6e:e8:d3:ea:3d:50:20:70:d6:97:d0:d7:68:38:
                    55:80:d3:b3:25:f1:d9:fb:d0:9c:65:5a:3f:22:88:
                    a9:f8:6c:f5:8e:08:23:e8:cd:ab:69:aa:47:15:d5:
                    95:1f:29:58:9f:51:4b:8f:01:c3:b8:5d:d9:6a:e0:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:B3:B5:3F:AF:4E:AB:B2:AA:45:D4:48:F6:D4:02:03:43:C7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/04d95c9b-3c3b-3141-bf2e-afeec9b5bd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:84:80:91:c9:50:4e:cd:5b:fa:7f:95:d5:46:62:32:cc:
         38:e6:d5:d8:87:97:c0:fb:0a:25:3a:fa:73:a6:79:27:8c:85:
         ff:0c:0f:da:e7:58:dd:e5:50:bc:34:d0:5b:1b:9b:9b:c7:98:
         b2:81:28:83:79:d1:3c:e6:b9:01:f6:83:3b:86:9a:79:7d:36:
         45:de:7f:b2:3d:84:e2:f5:de:b1:98:0b:2e:f8:1a:e2:f1:fe:
         31:16:70:4d:9b:2b:41:65:df:f0:21:9a:f6:f5:86:67:34:02:
         2a:84:1f:d9:28:a8:58:5a:cd:9e:43:c6:4b:8c:5d:f7:be:81:
         b9:51:8f:60:2e:1b:e5:d5:4a:f7:08:82:5e:da:a8:e4:83:8e:
         7b:b9:85:27:c2:af:1f:a8:03:a4:25:29:4c:b8:39:1e:c7:99:
         81:af:be:dd:74:7f:22:85:4f:4b:9f:b6:6d:3e:f2:ab:2d:7a:
         98:d1:6c:53:9a:5c:3e:2c:fc:73:07:b5:4a:1f:da:fa:ab:4a:
         53:0b:ce:bb:ae:ee:d5:09:6c:85:1c:1b:c3:01:b6:cb:2d:15:
         89:68:06:ac:9e:49:23:80:c2:7e:ed:41:06:64:4d:73:2f:73:
         d8:98:99:d0:8b:74:f5:11:4a:6a:31:3e:34:b1:ae:91:97:e4:
         01:3c:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:52 2025 by rpki-client