Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/42e0258e-ec06-34ea-8209-f19e6febb314.roa
File:                     42e0258e-ec06-34ea-8209-f19e6febb314.roa (raw, json)
Hash identifier:          EfsOrkIUX9kAaLY6RsB/bAAzilXq57LcAhSQxljFUVY=
Subject key identifier:   60:7E:96:4C:05:CD:82:BC:5D:CE:DD:B1:BB:82:12:9B:AA:F6:A7:CC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00698DF8D19C1590F83E580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/42e0258e-ec06-34ea-8209-f19e6febb314.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:86cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:98:df:8d:19:c1:59:0f:83:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2ecdec63-64e5-4488-b4cd-202790cceeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:c1:43:ae:52:f0:94:cb:48:4f:48:27:a6:
                    a5:0f:09:38:88:66:e0:6a:7f:08:ba:a7:9b:47:66:
                    14:dd:63:d0:c1:74:67:e8:b1:67:82:fd:7c:e5:36:
                    a8:9d:29:93:10:6a:96:3d:79:dc:b7:ea:cc:47:08:
                    dd:9e:2e:6e:0f:4f:04:5c:b5:1e:bf:99:94:8a:df:
                    93:ff:41:c7:cc:b4:9e:c7:3d:96:bb:59:51:b8:6d:
                    93:f2:a1:ac:1f:25:e6:bb:81:8d:51:30:59:2d:9f:
                    15:c1:21:96:3f:1e:10:de:63:3a:5d:0a:cb:7b:b7:
                    e5:31:2e:9c:c5:24:01:04:73:97:a8:cc:7c:80:bf:
                    b8:95:a1:63:4b:fa:e0:0b:17:90:c3:4d:ef:df:23:
                    61:63:c6:07:18:39:67:42:47:24:ec:47:4b:8f:0d:
                    dc:8d:7b:99:ab:ff:79:c0:55:8b:23:c3:bd:f3:0d:
                    59:4c:18:8b:33:8d:bc:2c:a4:ca:e4:d3:83:ae:77:
                    2e:ee:e2:67:ca:12:45:a1:cd:9c:80:e9:b7:a3:6d:
                    3b:9f:2d:21:b3:6f:7a:f3:b5:ba:2b:f9:68:bc:3c:
                    0a:e6:e0:95:8d:f7:db:8a:c8:09:00:9a:45:5a:6c:
                    3b:0e:b6:39:b2:ba:87:b7:37:7a:a6:fa:ff:b6:49:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7E:96:4C:05:CD:82:BC:5D:CE:DD:B1:BB:82:12:9B:AA:F6:A7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/42e0258e-ec06-34ea-8209-f19e6febb314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:86cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:67:59:84:7e:27:78:cd:2a:11:28:68:b5:1c:ce:04:3d:
         3a:d0:d5:1f:2d:fc:c3:35:e7:e2:8b:1d:bc:57:5c:23:9d:a3:
         ed:04:d7:2b:de:f3:60:6b:c0:b1:b6:b3:3f:04:07:fa:e2:c9:
         8d:e3:f4:e9:ae:68:0c:c7:79:22:64:1f:33:cc:10:72:30:61:
         98:52:51:03:d4:22:18:00:fb:00:cf:35:cc:6e:8e:e5:9c:ee:
         84:8c:4f:9e:0e:49:8e:73:34:81:ae:60:48:68:5a:40:3f:60:
         ce:4c:52:48:19:75:70:a2:b5:ca:0c:92:da:55:b1:e6:e4:2e:
         08:25:89:03:27:d9:26:3e:2c:34:77:09:c0:c3:fe:28:bf:8c:
         4b:6f:1f:0d:4b:82:50:6e:1b:f0:04:b9:8b:fc:d4:91:e4:05:
         f8:b2:c9:4f:c1:af:50:79:82:fc:5e:15:93:c9:49:c8:ab:47:
         69:6f:43:b8:69:e5:0a:de:ca:5e:41:69:86:58:d4:a4:ed:bf:
         fe:26:d3:9e:52:62:26:b4:fb:3a:97:0f:e1:12:5e:d8:4b:75:
         bf:0f:6b:d2:8b:03:77:ad:f7:9c:27:d8:73:22:50:cd:d8:9b:
         16:58:ca:1e:95:4e:e4:82:44:9c:6f:da:3b:57:7b:32:db:65:
         21:48:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:37 2025 by rpki-client