Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa
File:                     98739275-0572-3fb7-81fe-1d41c7be55b1.roa (raw, json)
Hash identifier:          iIPQhKwOSj+BZed4rY8KeW+ng2JKf1Me+5uBpLZ/Xvs=
Subject key identifier:   48:C7:1B:4B:F7:EA:7F:F4:6D:48:FC:5E:23:EC:E5:3D:FC:DF:8A:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7757C9C7C950379B2200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:84d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:77:57:c9:c7:c9:50:37:9b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=1704e019-ff39-4d2e-ab85-28217a0afec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:1e:f9:8f:21:77:05:fd:c8:5a:04:1f:5d:
                    11:ec:62:79:d6:93:7b:4c:7f:ec:aa:8a:b6:eb:1e:
                    d6:d9:4f:55:e6:2d:35:08:06:7f:78:58:86:36:18:
                    dc:3a:18:12:0b:8c:fd:54:a4:c7:99:37:2a:df:7f:
                    4f:6c:27:14:84:54:9d:1f:67:62:0c:63:78:e6:b3:
                    09:2a:2f:e0:4e:f7:58:40:fb:df:3a:87:a5:cb:13:
                    b8:b6:a3:9d:8d:da:22:da:2f:88:c6:9e:c0:06:57:
                    a7:6d:6f:cd:b8:25:97:1d:1e:14:85:7e:62:ea:59:
                    e5:8e:9d:4f:4e:27:a0:a4:e6:53:7b:0e:c5:54:28:
                    08:ce:11:e6:7f:75:fa:06:1c:c8:69:bc:a0:57:d9:
                    82:64:f0:47:0c:f5:03:74:c7:99:0b:c6:f8:33:40:
                    21:92:c5:f7:3d:6b:4a:4d:e3:97:79:da:46:3a:31:
                    5c:0b:74:3a:68:b4:c2:a5:1a:74:30:e3:b4:e8:8d:
                    60:14:a8:46:9e:c9:f0:42:54:b9:82:29:9b:12:3b:
                    02:e9:38:aa:18:32:40:54:1d:b1:88:cb:16:5b:ec:
                    13:49:a6:a7:ca:dd:bc:96:91:b8:27:2f:e4:ff:09:
                    42:9f:16:71:32:0e:88:9c:95:04:25:b2:ba:1e:de:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:1B:4B:F7:EA:7F:F4:6D:48:FC:5E:23:EC:E5:3D:FC:DF:8A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98739275-0572-3fb7-81fe-1d41c7be55b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:72:a8:29:ca:b2:6d:3a:3f:63:f8:37:cd:44:05:0a:b1:d1:
         89:f2:59:9c:eb:6e:3c:13:58:bd:0e:78:ed:62:3b:87:6d:1a:
         a5:3c:f2:0b:22:91:ad:e7:8a:13:aa:3b:18:f1:7d:2e:6a:a0:
         21:c0:4b:9a:3b:af:57:f3:81:e2:a0:9a:1f:24:cd:fd:e1:d1:
         ab:15:a7:12:43:36:3f:a4:1b:c8:76:38:92:77:a2:d9:26:b7:
         38:9e:92:44:45:e9:59:39:31:96:aa:ec:e5:1f:87:82:c5:0b:
         8f:44:37:dd:d6:f8:e1:44:84:30:09:f6:c6:00:fc:34:14:bd:
         45:ad:02:a0:c7:58:43:4d:99:a8:a3:23:9f:4b:15:81:60:8d:
         ad:48:71:4b:b2:af:fd:37:37:c8:b4:2e:d4:de:b9:44:aa:a1:
         7a:7a:c6:5f:69:db:78:01:aa:f2:59:2f:4c:ee:3f:bc:92:12:
         18:7c:5b:d0:b1:0d:a8:59:2f:69:8f:6a:66:22:38:1a:a9:34:
         f7:e6:1c:11:99:43:f2:21:0d:8d:02:c0:e3:7f:73:d0:e3:ab:
         84:f3:4e:76:62:a6:8b:fb:a7:b6:be:e3:da:98:f9:a6:70:93:
         73:47:e5:1f:1a:08:19:9d:9d:49:b7:e2:4d:b7:18:98:ac:05:
         e9:cf:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:37:55 2025 by rpki-client