Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/162b0f5f-b74b-36f9-8600-ef4c6c168a9e.roa
File:                     162b0f5f-b74b-36f9-8600-ef4c6c168a9e.roa (raw, json)
Hash identifier:          FfkzAJa4JXmGpJWhvtxZ4Sl40QckYrf4mD+qvUl+1AU=
Subject key identifier:   68:E9:FA:2C:8A:38:09:C3:77:06:22:AE:31:31:2A:BA:2C:47:0E:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006932750CDD5F6846DFB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/162b0f5f-b74b-36f9-8600-ef4c6c168a9e.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:93:27:50:cd:d5:f6:84:6d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2184ee3a-a7ae-4c5e-aea0-f94a0bc2cecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:47:6d:c7:bd:ff:52:1a:a0:a1:6b:6b:42:
                    21:42:1f:3f:c3:43:07:c6:3f:db:df:60:eb:8a:96:
                    b3:97:86:4b:59:23:fd:61:78:da:d2:0a:2a:85:73:
                    d1:f9:7c:bf:ac:26:a1:a1:6f:b5:ff:43:02:51:29:
                    f1:d2:4c:1b:11:5f:53:03:5d:f9:c7:28:fe:5a:f2:
                    e5:70:5e:f9:f5:0c:0f:d0:a2:f6:ef:ab:9a:13:26:
                    a6:27:d5:6a:eb:57:72:92:2f:87:0e:66:22:c6:aa:
                    d9:2f:53:1d:e5:26:f2:87:b4:8c:8a:86:fc:9d:67:
                    c8:1f:c7:7e:9c:b2:0c:a9:bb:1b:35:37:05:d0:ea:
                    d0:31:7c:c8:d6:4f:b1:cc:ee:49:45:d4:ff:4e:ed:
                    08:51:44:bc:4f:b5:5f:ab:6c:fc:0d:c2:8d:ea:8b:
                    fb:fe:39:22:d7:c6:3a:6f:46:27:48:8f:33:5e:0b:
                    7c:cd:2c:4d:fe:ca:7e:6f:de:7d:76:1b:79:9c:d7:
                    9f:9d:eb:bf:72:12:e4:03:41:e7:cc:3f:00:68:ce:
                    83:4d:6f:55:9d:63:38:40:7a:ff:8d:f4:f6:2f:ab:
                    66:98:1d:db:2f:7d:fd:7b:a3:8a:4a:29:02:e7:d5:
                    e7:12:30:38:32:73:8d:e6:81:cc:02:ba:c7:9d:95:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:FA:2C:8A:38:09:C3:77:06:22:AE:31:31:2A:BA:2C:47:0E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/162b0f5f-b74b-36f9-8600-ef4c6c168a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:96:de:77:cd:6e:f4:a1:2b:91:24:1f:3b:c5:0f:43:85:82:
         c2:61:8a:4b:8f:61:f0:00:f0:b2:27:e7:2e:b5:3b:31:fb:24:
         4d:1f:68:67:f7:00:f2:c0:64:f1:81:64:c3:7a:4a:f0:20:68:
         8f:a3:e6:ae:c0:fa:63:36:db:4f:4e:79:4f:17:cd:ac:87:b2:
         14:08:0d:f5:dc:28:0d:e0:41:72:b2:be:fe:2e:ff:84:bc:d3:
         26:02:ee:86:7c:83:35:7f:e8:9d:be:4c:28:1b:ed:e4:b7:05:
         13:85:39:df:f3:04:49:ed:3a:33:f5:a1:56:d4:81:5e:a2:fe:
         c9:2c:0b:e3:8b:53:4b:a9:53:46:b6:30:af:c2:4e:a9:fc:50:
         3e:9e:08:9a:6b:a3:38:1f:27:b9:8d:f9:fc:36:3d:16:a1:f8:
         8c:35:d6:a0:87:5e:f8:6f:65:61:9c:a6:44:d7:be:38:c5:3f:
         6e:bf:8e:21:cd:3f:f5:a4:6c:36:47:cc:8c:2f:cf:77:b9:4d:
         4f:88:81:bf:bb:60:7b:a9:74:cf:1e:19:e2:9f:80:fd:75:82:
         ed:73:d4:98:b5:7f:93:f1:a6:29:7c:2a:b9:b0:9c:eb:2f:27:
         08:54:fc:e7:2e:a2:85:ce:a5:af:c7:ce:ab:2c:0e:af:bc:3d:
         c1:2b:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:45 2025 by rpki-client