Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/760579b5-31cb-33b3-92b5-dfb26e670055.roa
File:                     760579b5-31cb-33b3-92b5-dfb26e670055.roa (raw, json)
Hash identifier:          ZCwj/KTrCDEYY9v0xO5ah6kfRzqnsjh5Y9VWAVchNHI=
Subject key identifier:   E6:69:0A:5B:61:A8:62:FD:E4:7C:A1:76:5F:75:2A:5C:EA:10:35:97
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00698D0EA081EEC6C874080
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/760579b5-31cb-33b3-92b5-dfb26e670055.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8650::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:98:d0:ea:08:1e:ec:6c:87:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=d61bb8e2-866f-4a92-91ee-89dbae524e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:a2:34:90:40:c0:bf:f6:d0:b3:0b:b8:b6:
                    32:48:f3:15:09:62:08:5b:ba:ea:6d:4a:10:e8:a4:
                    5c:b5:6d:59:00:a7:3a:84:61:95:3c:ae:0f:aa:19:
                    7d:74:10:62:13:fb:66:91:42:a4:a3:cb:e0:a1:58:
                    17:60:f6:92:35:c0:5e:1f:9a:8a:89:44:1b:fe:15:
                    cf:09:c5:f3:ed:03:1b:75:89:d9:88:ba:71:48:d9:
                    8f:67:a1:7a:67:76:79:1d:03:42:2e:6d:0a:39:f9:
                    de:05:60:3c:96:b8:c7:c3:09:b5:01:9f:b0:1f:22:
                    14:a7:c5:17:c9:a7:a2:f7:37:b6:a2:62:54:5a:58:
                    ab:f1:26:c9:fb:de:b5:43:c8:fd:f0:58:c4:8d:0c:
                    77:93:27:71:a6:0d:d1:57:dd:03:4b:d0:5d:af:9b:
                    78:df:c5:c4:65:8e:51:57:b6:f6:b8:f0:18:22:dd:
                    27:3c:00:c1:cb:f0:82:60:d2:c7:d5:f5:c3:7f:4f:
                    92:27:f6:73:ef:7f:a3:0c:1f:c9:2a:45:89:5d:5d:
                    18:8d:fc:99:b8:73:29:38:98:24:b1:5a:18:74:7b:
                    ac:1f:a0:db:e1:bb:47:a0:dd:b9:4a:4f:2e:47:8f:
                    61:c9:ee:96:88:05:26:5f:09:23:4b:a1:f1:39:bd:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:0A:5B:61:A8:62:FD:E4:7C:A1:76:5F:75:2A:5C:EA:10:35:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/760579b5-31cb-33b3-92b5-dfb26e670055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8650::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f8:0e:26:00:0f:3b:fe:13:b0:1b:53:60:bb:5a:a4:0b:e6:
         fa:79:e9:c1:4e:68:29:35:39:70:cc:5a:a2:31:73:a9:ac:f4:
         03:39:39:2c:9f:2f:c4:b0:e0:f6:28:c6:7b:c7:98:07:2c:e4:
         80:c9:7b:40:b9:8b:9e:14:6d:0d:de:ef:f1:fe:c6:8d:49:90:
         59:c7:ff:a0:da:d8:a0:25:2b:6c:b2:a3:1d:b0:f8:7b:a5:fc:
         73:ca:0d:90:19:06:6d:a0:dd:2d:22:a8:ac:d9:f7:1f:bb:49:
         b6:7b:45:c8:55:8a:7d:50:07:c1:d8:f6:22:94:f7:d7:26:de:
         a2:b5:50:c6:f7:39:dd:d3:b8:78:fe:fb:67:13:9e:26:c7:cd:
         58:b8:d7:11:a5:ec:8a:4c:b1:dd:a5:49:17:44:73:69:90:6a:
         86:0a:2f:03:e8:1f:a7:fd:e5:8c:80:13:38:46:a9:37:bd:9c:
         a5:b8:c4:44:d8:64:28:c4:ee:69:66:be:bf:bd:df:ae:24:ba:
         15:23:f7:b9:c1:58:88:5f:73:ae:54:cf:0d:af:e2:aa:3a:85:
         12:a5:cd:d4:cc:ed:d2:2c:c9:df:85:a5:5b:8e:03:08:96:9e:
         02:46:10:4d:d7:5f:e2:c1:c5:6c:92:18:8e:8d:0f:81:90:88:
         57:1a:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:12 2025 by rpki-client