Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa
File:                     4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa (raw, json)
Hash identifier:          16ft02HzpPL5f22vozwav9qOJbPIO8N/5RsedC8GSNQ=
Subject key identifier:   C3:AC:2F:C9:20:42:14:06:6D:C0:E8:D5:4D:89:C2:1A:4D:1F:5E:53
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F432858491AA6B37020D05D7AC1B5BAB0
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     398017
IP address blocks:        2602:fc42:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b3:70:20:d0:5d:7a:c1:b5:ba:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=442d481d-9855-4a29-9321-7444746d4984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:21:e5:c0:78:67:19:cd:5f:6d:82:eb:2f:
                    4f:ca:45:06:90:60:1f:91:94:ea:ca:6c:cc:1b:14:
                    c6:0a:33:ff:d6:fe:3d:63:b7:37:aa:7f:60:8f:a6:
                    d5:db:07:0f:e7:d2:cc:d3:a4:d1:1b:31:1f:8e:b4:
                    37:ac:da:3a:ef:b5:7a:da:20:99:d7:4e:c8:63:6b:
                    51:43:f8:e6:13:00:06:f5:6b:3a:6c:be:65:f6:1a:
                    d2:69:a2:06:e6:37:f6:e2:46:91:bb:75:82:40:96:
                    6f:5e:4a:64:28:1e:f5:7c:2b:bb:0f:f2:3a:8d:8d:
                    e6:0d:8c:2d:61:33:eb:e6:58:36:28:08:7e:30:00:
                    72:bf:be:53:79:f7:44:e9:a1:6b:f1:bc:3a:a3:6c:
                    56:f1:a3:15:6d:ef:d1:98:37:21:ba:60:b6:ac:45:
                    92:6d:17:f3:66:72:a5:fc:0d:07:5a:3c:4a:14:06:
                    85:0e:15:f5:a9:73:1a:84:90:9e:d2:bf:a1:a8:e4:
                    21:7d:98:50:32:09:a3:90:33:d9:1f:0a:94:62:a3:
                    fe:08:91:43:ba:a5:95:f4:78:ed:24:c2:4f:94:61:
                    22:ae:eb:57:6b:ae:aa:44:60:b5:99:5f:ce:42:68:
                    67:f0:f3:6b:31:1f:67:c3:11:4f:f4:03:a7:a6:88:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AC:2F:C9:20:42:14:06:6D:C0:E8:D5:4D:89:C2:1A:4D:1F:5E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/4cfdb82e-3453-30f8-91c0-041d67fdb1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc42:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:2a:e2:8b:a1:d6:47:f4:fc:22:ba:40:7c:ef:ae:27:b8:
         dc:f3:2b:fd:58:3b:94:1f:7a:c2:f4:60:51:67:cf:ce:53:25:
         4c:22:8e:29:e5:91:21:bf:76:5b:89:ff:4e:b9:21:52:76:b3:
         47:61:a0:f6:39:f5:9e:9a:90:f5:73:f9:f0:61:8f:ee:f9:21:
         2c:4f:9d:25:e9:ea:5e:f3:9b:5c:7e:0c:f4:bf:cc:06:da:fd:
         6c:1d:43:cd:61:57:bf:75:f2:ab:a3:b8:db:4c:2a:3c:66:cb:
         21:e6:29:69:1a:47:5a:49:48:c6:fe:f5:f3:c3:6b:ae:02:3d:
         02:84:fa:42:3b:9c:1d:90:c5:2f:4e:2b:75:2c:8b:4c:24:ac:
         35:9a:ee:5e:f0:33:39:5e:ef:84:bc:58:5e:fe:e1:0f:63:75:
         85:e1:80:d5:36:47:f1:3c:b0:41:cb:a1:7c:e2:f6:97:5d:b9:
         c9:e2:38:a9:c0:29:dc:14:5c:bc:ab:b9:05:68:6b:f1:a2:72:
         56:25:46:15:87:07:d9:85:95:18:27:19:71:16:f2:90:9e:d4:
         5e:b9:6d:4e:e4:c4:fc:a2:11:6c:9a:fb:e1:0e:17:5e:f9:09:
         37:61:91:01:ab:d5:22:18:11:67:f1:31:27:95:9c:64:14:c1:
         3d:45:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:57 2025 by rpki-client