Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa
File:                     49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa (raw, json)
Hash identifier:          UuZqrcPXvuMzGUCc+gOj2F/0zgdz+pIhdgro1GvFQ1E=
Subject key identifier:   67:1D:64:2C:68:8D:92:D2:DE:4D:1B:D6:DA:B5:89:98:4C:75:A4:AF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00674D72B31B0BBA57FA000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8626::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:74:d7:2b:31:b0:bb:a5:7f:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=2d5a3dd8-36ad-439e-9618-b2d4737fd729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:31:ec:74:23:26:9a:22:59:30:bb:68:e4:
                    84:c5:d3:e1:65:8d:9f:68:0a:dd:57:38:ea:56:e6:
                    bf:1e:96:33:99:a1:e3:1a:39:c5:0a:8d:fc:71:c1:
                    14:bf:3c:8b:3c:94:77:da:3d:94:00:5e:6e:76:55:
                    e4:56:df:a9:6f:8e:28:6d:e6:88:f8:2e:8f:2a:e8:
                    65:d1:31:55:9c:17:ba:4e:7b:67:23:51:6d:ab:b2:
                    5d:cb:e1:ae:d3:b3:87:5c:30:e8:74:69:41:5a:93:
                    f5:f8:07:ed:db:be:a7:4a:24:4f:66:9e:16:15:e4:
                    28:80:71:d7:6d:5a:91:7b:0f:e0:d5:03:a4:33:88:
                    01:14:af:23:d4:dc:9a:12:70:77:2d:07:bb:8b:d3:
                    b4:30:73:dd:59:91:5c:df:b2:64:13:06:7d:ba:ec:
                    67:b9:a1:d8:db:bc:61:86:60:e8:a8:19:8a:25:d7:
                    85:bf:d4:12:57:63:fc:22:52:d3:57:73:37:21:53:
                    d4:48:e6:fb:fa:6a:5e:13:71:a9:f3:a4:01:d5:c9:
                    99:40:8b:8d:4d:90:d9:cf:50:aa:71:ae:a4:34:df:
                    e1:81:73:c0:12:a8:9e:bd:67:2c:e4:06:f5:ef:e7:
                    ae:80:36:a2:e5:36:00:43:e3:35:b8:a5:4a:30:81:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1D:64:2C:68:8D:92:D2:DE:4D:1B:D6:DA:B5:89:98:4C:75:A4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/49fae9bc-7ce0-30e9-960f-6b2c373c8482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8626::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:71:07:f3:b1:29:bc:f9:3f:0e:0d:e4:d6:53:6c:a5:07:4f:
         ee:7e:57:16:ec:91:32:12:31:18:2b:b7:d3:0f:e7:cc:dc:43:
         6a:81:11:a3:20:fe:d5:4e:89:89:6a:74:62:1f:b3:f4:fa:bc:
         ee:2e:ff:00:83:83:03:97:b9:2c:61:7c:08:23:40:90:c9:b9:
         ae:13:53:ce:8a:0f:77:e2:4b:7d:50:63:5c:85:8f:72:94:db:
         83:9d:88:f1:1d:1d:06:6f:be:8a:46:59:39:4a:b7:e8:11:39:
         3a:4f:67:9f:5d:bc:22:4f:5b:27:6e:fe:26:dc:ae:e5:b8:4f:
         aa:12:6b:59:7a:8b:11:c6:da:c9:de:43:a6:c7:55:56:5e:f8:
         9d:43:44:ad:ee:5e:6e:73:2c:fc:79:4f:d0:a2:0c:e5:dd:8b:
         54:42:16:13:92:c7:cb:2b:64:64:e5:87:81:7f:75:3c:26:e0:
         4c:77:e9:e2:df:6c:9f:67:6a:06:f9:e4:03:27:b5:0b:b7:4a:
         32:9c:73:d3:51:5f:aa:dd:68:4c:1f:64:19:bb:ae:63:35:57:
         c2:2e:6a:0f:f4:cf:d2:3e:b6:22:df:47:ff:aa:8d:56:a3:e8:
         e5:e3:5b:22:b1:a7:c6:4c:26:dc:fd:e4:11:15:cb:bb:07:78:
         37:06:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:39 2025 by rpki-client