Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa
File:                     27853cdd-02d7-3a7b-b933-be88c62eee29.roa (raw, json)
Hash identifier:          hGnoDFODfObiKoUVN0Bk9ao8qseWFashdR3kfE2RkJg=
Subject key identifier:   D4:F5:4E:35:FD:35:46:2D:B1:5B:A4:04:EC:D3:42:81:20:3E:BC:FB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069C49ECDD188926CC66E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2603:903e:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9c:49:ec:dd:18:89:26:cc:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=fe70b5e2-0a94-4733-804b-a2120f568be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:4f:41:eb:ba:fb:25:88:f9:29:be:9f:7c:
                    b6:ea:80:af:e9:b0:00:ed:ac:35:2a:db:18:f9:ea:
                    c3:cf:ea:1e:01:8e:66:60:96:a0:58:8a:d6:83:bd:
                    70:8b:1c:1e:fa:54:a7:9f:d9:cd:20:5f:a4:ab:02:
                    23:ca:ae:18:61:7d:70:5b:a8:94:c9:60:9b:db:c5:
                    2e:22:97:ac:9c:02:2d:f9:60:b0:7c:07:b8:6f:85:
                    6d:ea:cc:95:e7:6b:2f:50:05:e4:55:ed:2d:fb:5d:
                    81:6b:ea:d0:62:6d:ba:e9:e2:00:ea:08:64:cb:9f:
                    1a:d5:78:67:e9:ad:16:c0:ad:2b:bd:3c:0a:d0:82:
                    f0:b7:23:da:7f:8b:53:66:ce:52:86:cf:59:0c:e5:
                    4c:a4:12:b0:46:53:3c:c6:b3:1c:74:e2:9f:9a:9a:
                    70:08:ba:ce:62:31:2f:25:80:47:01:2a:0f:7f:d6:
                    ef:6a:2e:e0:9a:fc:6b:f7:01:5e:22:6f:ba:07:f6:
                    3c:62:0a:4a:f1:4c:a2:3a:63:bd:4a:ee:aa:31:16:
                    e3:d7:50:28:4b:07:db:a5:da:10:98:fa:1a:55:52:
                    be:65:b3:c0:f7:28:88:2a:69:6e:76:05:b6:73:88:
                    9b:c5:11:49:dd:12:74:ea:99:3f:91:33:97:dd:76:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:4E:35:FD:35:46:2D:B1:5B:A4:04:EC:D3:42:81:20:3E:BC:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:6c:a8:9f:f1:23:39:09:54:60:bd:5d:21:e0:11:19:4c:
         e7:fc:4d:93:18:3f:57:7e:12:fd:dc:a8:f0:84:e0:f9:5b:b6:
         46:73:62:7e:cc:ce:d9:1d:35:2e:29:86:82:09:54:9b:9d:e3:
         8b:64:9c:3c:89:5f:08:ac:57:a0:9f:d8:12:a4:7f:ee:6e:d5:
         84:b9:f2:4e:99:28:af:ba:91:ea:7c:ad:d5:d3:ce:52:d3:0b:
         9c:00:8d:b0:65:00:be:77:33:31:ba:61:85:a8:97:3c:8a:8b:
         7a:b7:8d:04:c5:21:da:1b:ba:57:b9:00:7e:88:e1:52:e2:19:
         cd:18:4a:64:e8:e8:15:4f:6a:e9:0b:62:4d:24:b9:22:fa:72:
         94:63:6b:e8:b0:ca:33:e9:2c:03:aa:f7:50:df:32:00:4d:46:
         c9:6a:63:19:29:ea:73:3a:76:9d:b5:de:18:4e:26:ce:9a:28:
         e9:b1:27:d6:2e:58:c8:4d:42:5d:34:96:0d:dc:06:6d:e2:81:
         d1:5d:7a:91:2f:fe:c6:3b:f8:f2:64:36:e4:66:3d:db:05:d8:
         2a:cf:c8:1f:52:71:95:39:f5:23:6a:5d:2d:1c:31:98:60:6a:
         31:c1:8c:42:a1:d8:c5:d1:ed:5f:f7:f6:6c:f1:76:84:fe:0d:
         0c:4f:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:13 2025 by rpki-client