Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
File:                     a3e6a023-f8b3-32fa-818a-eabceac6471b.roa (raw, json)
Hash identifier:          1O2y68RF3pHLsdUos7KN+1BFrBv4W7Rqr1RtiqCHvjA=
Subject key identifier:   ED:43:EC:42:E3:FA:79:7A:7B:08:34:7B:F4:95:88:23:0E:D5:FE:3C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848A136175B87E70A60114F1B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     33363
IP address blocks:        2603:9015::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:17:5b:87:e7:0a:60:11:4f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=b761ca0f-a5a7-4cdb-9863-7a453512d4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:03:93:61:7d:74:9a:67:08:07:d2:95:d0:
                    df:1b:8c:46:ea:5b:73:be:d8:4f:6c:38:96:1f:06:
                    cb:47:b1:bf:87:92:c7:08:13:f9:38:35:15:0c:66:
                    b8:4c:b0:86:cc:0a:20:67:50:10:fd:62:5d:b7:f6:
                    d5:a8:18:26:12:86:7b:45:f6:ec:d2:b6:fd:10:97:
                    0e:e7:55:e4:89:04:c3:95:29:fa:74:22:8a:58:bb:
                    6d:40:df:83:d8:70:b9:52:39:03:84:82:22:1f:c8:
                    27:4b:84:9b:f2:74:8b:bc:ff:d5:67:97:17:96:af:
                    b4:cc:49:ef:fa:18:b5:e2:1b:06:09:04:bd:00:a6:
                    8a:bf:36:1e:a0:4e:2b:5b:a7:cc:ec:14:b1:ee:df:
                    60:3e:73:e9:e9:ff:2e:58:03:95:ac:02:13:ad:06:
                    6f:d3:84:59:ad:94:05:b2:f9:00:db:40:80:2e:0d:
                    73:08:cc:94:52:ea:a0:33:3d:37:e3:19:69:e3:e3:
                    4a:f4:f7:15:65:e1:28:95:ed:dd:a7:c4:2d:94:8b:
                    86:87:22:92:cd:a8:5a:43:ee:d9:63:fd:fa:31:f0:
                    40:cc:bb:e4:51:95:9e:c0:ac:1a:b3:05:4e:d5:a8:
                    d6:fa:d2:5f:90:5c:7b:5d:c4:49:eb:a0:95:c0:d8:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:43:EC:42:E3:FA:79:7A:7B:08:34:7B:F4:95:88:23:0E:D5:FE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9015::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:be:6e:2e:0e:e9:f0:03:87:fc:40:96:8e:05:7e:d9:39:
         e9:78:68:e3:c4:b5:b0:b1:30:5d:dc:52:7c:56:33:71:10:5b:
         8c:4e:aa:20:73:90:bf:c1:5d:14:60:c6:a4:5f:81:05:6d:00:
         76:df:39:be:61:e2:03:03:bc:eb:d9:2e:30:f9:23:3d:e0:ab:
         3c:0a:9b:77:62:68:e6:13:bd:40:6d:8c:91:51:54:92:f9:e5:
         c4:90:f3:2b:a2:e5:ca:c9:3c:dc:9c:19:f0:e7:df:28:5e:34:
         75:66:39:f8:7c:d8:68:11:55:9c:b5:65:7b:73:19:22:79:76:
         bd:bf:e9:8a:94:db:1e:0e:27:07:23:c6:3a:24:41:dc:84:c2:
         25:c1:1c:b0:37:4b:1c:20:59:77:d3:80:10:0e:0b:5c:17:e2:
         d5:dc:87:94:3b:88:bc:cb:85:6b:e6:b4:5c:9e:62:9d:50:b2:
         34:ef:38:07:b1:c5:8c:44:91:97:27:f8:a7:0f:4d:ea:74:f6:
         a2:e5:c5:4b:29:2c:79:6f:20:9a:16:48:36:0e:7c:a2:e8:15:
         03:51:dd:5f:84:12:a6:f3:b9:61:99:0b:16:bb:2d:b9:13:e6:
         aa:b7:17:c4:a7:8b:8a:0e:f5:a4:b1:70:8f:23:1a:87:1d:57:
         c5:77:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:06 2025 by rpki-client