Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7def0b03-6d4d-3c6d-bd6c-e97151588330.roa
File:                     7def0b03-6d4d-3c6d-bd6c-e97151588330.roa (raw, json)
Hash identifier:          dqVSGPmsj1DkSYgJ/a6G50NM2hqr5431JVMKehjXjGo=
Subject key identifier:   70:A6:FA:09:0B:4A:EC:50:2A:4E:0A:DF:F3:85:71:6F:65:C7:6F:D3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E00696F0966B5A154C4F3740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7def0b03-6d4d-3c6d-bd6c-e97151588330.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:8171::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:96:f0:96:6b:5a:15:4c:4f:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=3a9499da-1828-46ec-bc1e-5e87abc58516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:fc:ff:a8:ca:81:6b:c2:70:32:d2:b4:32:
                    eb:cf:25:1e:6b:ac:cd:3a:00:32:c7:50:0b:7c:45:
                    a3:3d:a0:fa:4d:12:86:c3:8e:5f:cc:85:55:60:be:
                    1e:fa:94:79:32:f7:79:15:a2:34:fa:d3:73:13:76:
                    15:79:52:98:ab:d8:24:96:1f:ab:f5:30:3c:46:65:
                    f5:e8:aa:7d:88:a0:3c:80:29:1f:93:a8:77:d5:a0:
                    cf:21:d1:40:b6:38:ce:4e:41:2c:33:2b:41:8f:1c:
                    e8:3b:dd:cf:4d:ed:cc:88:cb:db:45:1c:da:ed:93:
                    f8:66:e9:b3:23:b6:a6:7a:7e:47:f9:4d:d5:3c:0d:
                    25:30:01:8d:80:58:38:62:54:a8:e6:fa:59:4f:d6:
                    19:18:14:66:2e:bf:93:56:e5:65:4b:f2:d0:71:fa:
                    96:d1:cc:d0:d1:2a:77:ea:25:ae:1a:2b:f0:9c:6d:
                    a5:71:73:5e:a8:ce:2c:ed:de:c1:5a:e1:96:70:27:
                    43:5f:48:ab:15:44:2e:28:a0:12:4b:c0:07:03:4b:
                    55:9d:98:17:d7:fe:5b:e5:3b:13:73:eb:aa:cf:7d:
                    1b:e4:4c:d0:46:6b:aa:b4:e6:05:3b:a6:d0:57:05:
                    df:c3:01:ab:fb:8f:8b:6d:49:39:d1:7f:16:0d:be:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A6:FA:09:0B:4A:EC:50:2A:4E:0A:DF:F3:85:71:6F:65:C7:6F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7def0b03-6d4d-3c6d-bd6c-e97151588330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8171::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:20:ba:2b:3d:99:82:fb:ae:5b:a2:1f:9f:7c:c7:7e:de:17:
         42:c1:ea:00:f3:6b:56:51:40:2d:46:5a:cd:19:86:6f:cf:47:
         71:84:34:49:e6:82:ed:68:13:b3:d1:64:22:1c:6f:a6:4a:c7:
         e9:d1:b8:2a:e0:fa:12:76:ba:06:a0:8e:2b:1d:af:c9:f6:6a:
         2f:59:26:0e:fa:c2:9c:15:dd:a5:b5:80:78:1d:13:0b:b4:86:
         47:35:04:aa:e9:7b:4c:ea:24:78:56:3a:9f:d4:dd:4c:f9:b7:
         2f:43:2e:cb:de:c7:19:26:36:c0:63:40:68:af:14:fc:e2:5e:
         24:cd:ad:90:a6:48:e0:ba:1b:ee:31:9a:d0:47:37:50:13:23:
         7b:3e:c2:dd:f8:90:b0:b6:fe:5f:07:be:81:73:e3:b7:34:0e:
         f5:4f:20:b6:fb:04:90:13:8c:50:39:cf:53:55:6e:3a:64:0c:
         8f:e4:11:cf:6d:98:45:bd:2e:1c:83:cc:d7:68:b0:cc:27:c2:
         1e:81:9a:5c:3e:15:bf:7e:d9:83:c8:ef:d8:4b:e0:58:e4:f4:
         a0:a9:35:fb:94:92:53:5d:18:d4:65:2c:bc:63:c5:95:a1:a4:
         cb:d4:d1:32:32:bc:6a:56:f5:17:d0:49:f7:eb:f0:9b:ff:34:
         82:71:c3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:46:46 2025 by rpki-client