Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa
File:                     67dbb277-754e-3624-b108-1973387047b0.roa (raw, json)
Hash identifier:          G57toeH/hqp/TknSiqYNgiMlX7PnHnQNVWZ1GHV97Cg=
Subject key identifier:   C0:94:34:64:DE:0C:10:29:4F:C9:BF:6D:48:0B:05:96:CC:C9:5D:1C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848F22C73261DDE54616A43D240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     33363
IP address blocks:        2605:a400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:73:26:1d:de:54:61:6a:43:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=82e97cc2-3e87-4b37-9fdc-4791feaf89e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:90:1e:2d:2d:35:39:be:fb:b1:02:a3:ac:
                    78:ba:32:98:c0:31:0c:a4:33:09:a6:9b:ad:a5:51:
                    31:22:c1:23:3f:be:8a:fa:3f:e4:2e:79:1a:93:17:
                    5a:19:eb:0e:ea:28:1f:f4:69:d8:09:a9:87:f7:07:
                    3e:c7:20:85:a5:b3:f1:14:ec:fb:e5:65:32:be:17:
                    89:e0:4b:e2:bb:2f:77:86:25:06:13:e2:59:5e:e3:
                    7c:78:21:41:e6:71:d7:22:53:16:3e:cd:3c:21:d6:
                    8d:e3:62:a4:99:99:36:1f:c9:ab:7d:a1:09:b4:62:
                    f8:f5:1a:23:fb:75:f2:22:21:eb:7e:34:74:0c:7c:
                    6f:3e:7e:b6:3e:f8:4a:16:dc:98:ea:63:67:e2:70:
                    06:46:04:4f:64:a3:34:c3:91:56:5f:3f:03:7b:24:
                    e6:be:75:74:bc:b6:0f:7d:01:2e:e9:54:8f:71:2e:
                    c7:5b:15:c6:47:26:f6:12:22:6d:5d:9f:10:8c:af:
                    e9:41:1f:9a:2a:f6:57:97:9b:fa:bc:06:a6:4d:d4:
                    e0:14:df:22:95:a6:be:91:71:27:fd:b1:9d:f4:e6:
                    df:2c:30:3f:8b:66:8f:56:fb:db:4c:b6:f7:52:8a:
                    bf:a0:be:5d:50:f4:4b:9a:ff:3d:98:42:58:f0:89:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:94:34:64:DE:0C:10:29:4F:C9:BF:6D:48:0B:05:96:CC:C9:5D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/67dbb277-754e-3624-b108-1973387047b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:3b:c1:36:cf:e7:bc:d5:84:ea:80:e4:c2:43:4f:61:30:
         f9:9a:50:89:19:fe:99:c4:d2:c9:0c:6c:3c:04:41:e0:56:56:
         e7:1b:ef:69:30:0a:5a:dc:0c:8c:9e:d8:e9:05:78:f2:21:26:
         c7:99:e3:6e:63:60:06:d1:e8:50:15:ae:75:3a:fb:a8:f7:eb:
         4d:f4:6c:28:b1:93:7c:1b:40:d0:d6:4c:00:ec:c7:e2:ee:06:
         c7:fd:d6:5b:47:12:e4:e6:7d:27:40:0c:3a:06:dc:32:6e:17:
         36:26:b9:86:55:9e:2a:8a:af:ac:8c:cc:7a:00:17:2e:2b:bf:
         ec:32:c0:8b:b2:00:a8:79:f2:71:7c:92:d2:cf:57:96:bf:97:
         7f:69:cf:6b:a3:9a:d5:2d:95:10:83:55:fa:bb:a8:f5:e5:85:
         df:69:91:68:20:12:6b:36:2c:0d:71:e2:9e:df:e7:d5:80:7d:
         57:e8:44:93:b4:99:8b:15:c5:83:bc:cf:83:80:e7:1c:e0:4c:
         79:ef:86:3c:d3:74:99:d8:6d:2a:a7:4e:fa:54:af:55:49:85:
         d6:ec:82:b8:58:ae:7d:09:d5:57:4b:9a:ee:4f:36:30:f4:d8:
         ba:42:4f:11:bf:83:3e:bf:dd:b1:93:3e:43:7a:8d:61:73:74:
         da:fd:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:32 2025 by rpki-client