Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
File:                     e9561f82-c553-311c-84e7-0aabf2d00674.roa (raw, json)
Hash identifier:          l7IFukxplqVj62YrYNa30ZLJ04zZAu6BtcmiKPsAfu8=
Subject key identifier:   74:F6:BF:F6:59:77:2B:0B:EB:37:A2:1A:09:D6:64:B2:F4:4A:97:7B
Certificate issuer:       /CN=ac683038-c192-4fba-ae61-c511683cdb6a
Certificate serial:       010D0C9F4328584979743EBF918A99DDE466F780
Authority key identifier: D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     13549
IP address blocks:        2604:8fc0::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3e:bf:91:8a:99:dd:e4:66:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac683038-c192-4fba-ae61-c511683cdb6a
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=aae016d5-dd21-49f7-91ed-85c0aef8ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:ab:bb:c2:06:44:15:f4:58:ad:61:b0:33:
                    b9:70:40:cf:2a:86:12:31:ef:07:17:8b:04:48:44:
                    b9:19:2a:37:6f:ee:76:8a:16:3a:0c:79:de:71:ce:
                    a1:95:ed:7b:87:71:4c:0d:9f:24:c8:f1:97:8b:fc:
                    23:8f:26:83:42:8f:6b:6b:ea:e0:a2:41:5e:53:69:
                    58:a2:8f:34:96:74:47:f1:35:3e:6a:4f:72:ee:f3:
                    57:bc:e0:ac:6e:ba:28:64:98:9c:f9:b6:db:22:ea:
                    0d:b1:e4:0b:b1:e9:d0:69:97:fa:8b:da:71:86:3e:
                    e8:dc:60:61:26:5b:88:5e:92:fc:7f:bd:59:be:15:
                    37:93:bc:27:00:e2:ae:61:a8:58:6f:9c:c3:43:27:
                    aa:1f:2b:19:2a:75:2e:54:b8:c4:07:c7:c1:e4:61:
                    09:b3:e8:46:b0:b7:a4:6c:ee:d2:84:50:42:01:e9:
                    ae:ca:e5:5b:3c:7c:6e:f4:c3:c0:c4:d3:96:a7:39:
                    ea:96:50:e8:b8:3a:b5:8d:6c:0a:8c:43:a3:20:f1:
                    e5:ba:7f:5c:36:81:82:f7:ca:1e:1d:b4:42:75:58:
                    07:58:76:5b:a2:ae:01:1c:f9:52:8d:99:1f:00:d4:
                    00:80:65:2b:32:f8:99:ee:41:b6:af:d9:07:84:3a:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:BF:F6:59:77:2B:0B:EB:37:A2:1A:09:D6:64:B2:F4:4A:97:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/e9561f82-c553-311c-84e7-0aabf2d00674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a/ac683038-c192-4fba-ae61-c511683cdb6a.crl

            X509v3 Authority Key Identifier:
                keyid:D1:F4:1D:DB:27:4E:3B:A0:A5:7B:4B:11:17:C9:16:5D:85:21:1E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ac683038-c192-4fba-ae61-c511683cdb6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:09:db:35:ac:f4:f1:39:bc:43:8f:8a:6b:86:f7:07:30:55:
         de:b8:d1:de:13:b9:fa:40:f2:c1:14:d7:26:9b:df:a3:c3:42:
         40:8f:cd:2f:89:e2:50:70:b0:48:41:d1:f0:07:83:50:d2:dc:
         20:97:20:05:c6:40:86:14:74:e1:d4:3e:89:c2:e5:2f:44:96:
         e7:87:56:1e:0d:62:a2:9b:9a:2f:42:bc:5d:06:72:99:8d:2a:
         e7:cf:be:d8:82:04:00:5e:1e:e7:e8:49:08:54:4a:f5:9a:fd:
         18:bf:25:c1:ff:e7:55:71:0b:6a:11:f6:19:07:52:07:23:d5:
         0f:85:ce:54:16:e4:96:cc:f3:9d:ee:3a:96:61:67:5c:54:bc:
         dc:c1:e4:bd:25:0d:40:f1:74:c9:52:40:c9:a6:ce:e1:38:4f:
         d1:b6:f6:0e:ea:2d:12:80:92:7b:a6:8f:36:99:fb:d1:1b:28:
         44:1a:0f:84:fe:c8:0d:8f:41:38:83:9a:c5:b9:b8:26:97:5e:
         a6:2d:b4:3a:21:4c:1a:65:1a:c3:0b:d3:c1:24:9a:02:f9:24:
         60:f5:65:7d:2f:ff:f1:e6:ed:96:7b:ff:e6:d8:e8:32:e7:08:
         76:3d:69:8e:30:06:21:2d:e6:d7:7e:dc:0a:d4:12:f9:20:fb:
         91:1e:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:45 2025 by rpki-client