Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87443c7d-0dd1-38a8-8a34-54e5b0bbbce4.roa
File:                     87443c7d-0dd1-38a8-8a34-54e5b0bbbce4.roa (raw, json)
Hash identifier:          9gtgjM8zextQwjecrV4LYLglUr86mUd0+yNBEOzr32c=
Subject key identifier:   68:FA:EE:16:0A:60:71:AD:A4:A1:2D:F4:15:A5:DF:CB:3F:0C:AB:C8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0069A5F58DD7581A09C0380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87443c7d-0dd1-38a8-8a34-54e5b0bbbce4.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:80ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:9a:5f:58:dd:75:81:a0:9c:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=a6408893-e8c0-4fc6-a11c-8f90ef25b886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:cd:92:35:75:bf:a7:44:f5:09:fa:12:47:
                    ae:19:5d:82:4c:d8:e3:0c:c3:33:ad:e2:b7:3b:bb:
                    f4:25:bf:cc:a5:21:c4:9b:59:8b:b1:b8:88:4e:05:
                    59:db:32:e6:69:3a:ca:da:fc:fb:9e:8d:d6:00:09:
                    d9:da:47:40:18:b2:89:7a:14:bf:7f:a3:1e:e9:df:
                    8a:13:d1:21:26:a4:91:7f:79:f5:a6:b3:40:90:86:
                    b5:08:30:50:49:68:fb:8e:8b:c4:df:67:8d:e8:29:
                    39:5c:50:03:f6:9e:51:d9:78:d2:c2:77:8f:7a:dd:
                    ff:74:cd:52:98:5d:54:01:58:2f:ab:c5:d9:83:f9:
                    69:da:5e:cd:df:d7:b7:e9:90:25:bf:5d:fa:b6:85:
                    4e:c0:2e:83:ea:be:2d:28:c0:44:a9:9f:c0:f9:aa:
                    20:8c:64:86:f4:b6:21:b4:2c:d7:7a:25:e9:d2:07:
                    37:ec:39:74:35:94:79:61:9b:a6:a5:bc:f9:96:5b:
                    eb:85:31:d6:01:22:1f:92:3c:c2:b5:20:52:b0:e3:
                    f8:73:09:4e:5c:13:cf:72:23:bd:65:ec:3f:40:d9:
                    85:a4:e6:f2:ca:3b:d4:53:fd:f1:81:34:28:e4:af:
                    73:76:2f:8d:42:1e:2f:0c:74:c3:34:06:1f:a3:e8:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FA:EE:16:0A:60:71:AD:A4:A1:2D:F4:15:A5:DF:CB:3F:0C:AB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87443c7d-0dd1-38a8-8a34-54e5b0bbbce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:50:68:75:0d:75:ea:6c:e0:5b:fa:04:d7:a9:35:78:f2:
         b7:30:67:27:9b:3b:af:f0:47:bc:32:f4:48:ea:1a:b0:96:ed:
         5a:96:16:4b:0f:e4:0f:b4:94:5f:fd:43:f9:44:70:c2:4f:a6:
         03:2d:fb:51:e6:17:ea:34:8e:44:a5:5d:06:a4:45:e9:e5:dd:
         26:c1:6c:bb:93:a8:ed:3e:1d:3c:4b:eb:ba:93:60:53:d9:5a:
         41:df:ba:75:44:21:35:55:28:52:1c:00:06:58:71:87:81:b3:
         6d:4e:69:eb:56:55:2b:81:07:fe:10:2b:ea:b1:59:3a:85:50:
         1b:5b:da:26:66:37:3a:98:57:72:6b:52:41:6b:d8:2f:68:4e:
         50:ef:77:15:30:d9:a6:cf:96:0a:8d:1f:14:06:b5:1b:1e:d3:
         b1:aa:43:4a:8d:76:29:ee:1b:45:0b:87:f2:dd:7b:14:a3:30:
         a7:af:2d:77:7a:3a:b7:bc:d8:7c:d9:8b:b0:10:db:f5:47:eb:
         6f:b6:28:a2:dc:75:74:29:68:a7:ad:f4:b3:12:5a:c1:59:f8:
         bd:78:59:29:37:71:b3:ca:1f:dd:74:fe:13:eb:39:15:1c:e2:
         51:59:b3:08:75:1b:f6:1f:24:94:d3:3f:e2:8c:7c:79:62:13:
         50:6e:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:11 2025 by rpki-client