Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa
File:                     ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa (raw, json)
Hash identifier:          Fv7QUAZYTT1Ek4nzL2v2vXq0lj1vO5I3EQTvQKNaP0c=
Subject key identifier:   27:82:A0:F9:DF:07:3D:E2:A1:59:55:86:AE:18:F7:23:C2:61:45:04
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584867FAE4C71644384938464C00
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa
Signing time:             Thu 02 Jan 2025 02:00:39 +0000
ROA not before:           Thu 02 Jan 2025 02:00:39 +0000
ROA not after:            Wed 02 Apr 2025 01:00:39 +0000
asID:                     393878
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:fa:e4:c7:16:44:38:49:38:46:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jan  2 02:00:39 2025 GMT
            Not After : Apr  2 01:00:39 2025 GMT
        Subject: CN=c485dc52-145d-4285-a136-7e0597654727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:4c:de:6e:3e:7c:72:8c:40:30:4e:d5:0c:
                    64:b9:37:77:1b:d3:a4:98:b1:d3:03:10:b8:15:7d:
                    72:11:06:89:f0:ac:6c:b9:eb:57:02:f4:8e:ed:7b:
                    98:62:be:1d:ff:52:31:63:de:6a:67:8f:97:2d:e3:
                    9a:5f:86:9c:14:38:38:1e:bb:07:16:6e:bf:f6:10:
                    70:93:de:6d:29:c6:8b:e6:80:5c:17:80:84:63:04:
                    e4:d8:4f:fd:7f:8a:cc:c7:1b:8e:ac:66:e9:fd:e0:
                    81:76:49:15:a2:9d:62:75:7b:78:a8:40:27:4a:f2:
                    4d:0c:4c:fb:0d:71:83:72:0d:7d:56:47:49:9f:01:
                    cd:bf:6b:3c:33:57:10:a0:40:21:18:d1:e7:80:89:
                    8b:16:29:82:97:aa:c8:45:2b:5b:97:e0:ba:36:92:
                    18:cc:6c:35:86:c8:e5:f3:b4:a7:39:3a:5a:17:50:
                    40:67:39:ea:04:2e:cf:19:04:0e:10:3e:ae:a3:fd:
                    28:a8:b2:56:2e:20:df:d8:f8:1f:51:3b:31:2c:a9:
                    46:35:fb:1a:ef:f2:ef:11:ef:1d:38:cd:67:17:08:
                    7f:03:ac:17:8b:2d:ab:8f:ef:22:ce:6c:18:ed:38:
                    78:e2:bf:92:21:10:40:eb:78:c1:33:cc:d8:d3:40:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:A0:F9:DF:07:3D:E2:A1:59:55:86:AE:18:F7:23:C2:61:45:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:37:45:34:a4:92:bd:ac:94:a5:29:eb:58:c5:5c:2f:42:
         a8:33:c3:26:00:bd:4d:81:54:68:31:f2:f8:cb:cf:9b:01:fb:
         93:64:f4:6c:e9:d2:20:a8:aa:03:f2:aa:11:e7:77:04:c0:87:
         ae:fa:21:b5:b7:6f:a2:e1:c0:6c:44:41:72:52:9a:63:d9:8c:
         4d:cc:cd:a0:a4:00:ff:74:b2:c6:3b:45:90:0e:3c:70:92:f9:
         a3:38:10:69:eb:b4:5f:81:b2:2f:83:84:6b:f3:de:34:5e:bb:
         93:d8:58:c1:9e:7a:84:f7:13:73:98:9d:85:e0:81:f2:b7:41:
         a4:4c:f8:03:d2:6c:bd:b9:11:3e:4b:c0:30:43:b1:9c:bd:7c:
         2e:ed:ea:63:7f:04:ee:9e:3c:0a:71:c5:03:fb:ad:de:f6:d6:
         a6:42:ba:c6:b9:03:68:5d:e6:17:ad:a0:4e:32:ee:dd:b5:11:
         bc:cb:66:c5:76:74:60:66:c1:92:99:9b:5c:ec:dd:84:f5:35:
         43:5b:25:8d:86:9d:d9:64:7d:a0:15:ea:50:9f:7e:3b:f8:22:
         ca:84:ab:0e:fe:70:35:10:03:18:28:26:b3:a3:ca:5f:0c:b7:
         a1:95:ff:17:e8:ef:1d:aa:ac:43:5d:80:7b:c0:8b:c0:05:f0:
         61:9f:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:06 2025 by rpki-client