Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
File:                     fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa (raw, json)
Hash identifier:          mruRzE/YrI4hT6GmADPx7fmKs5BDkK0G21FXOpiNBHY=
Subject key identifier:   32:D4:E7:E4:FB:01:88:2D:A4:FA:34:3E:FF:E0:06:A3:49:2F:36:84
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006603B6A53E8522039CBC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     11427
IP address blocks:        2603:90f5:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:60:3b:6a:53:e8:52:20:39:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=f4dc100d-c242-42c4-8902-a34e7fdd7be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:06:c7:34:4c:e0:50:8a:a8:1c:48:3c:28:
                    3b:f4:59:6f:b9:36:0d:9b:5d:b0:e6:17:55:7e:e0:
                    99:90:cb:9c:7d:2d:59:6e:bd:ad:0b:b5:2a:e6:da:
                    ff:a8:ba:cc:30:96:30:23:e2:cc:90:94:55:e9:47:
                    49:cd:a5:9b:b2:db:ae:97:33:08:52:ef:2e:01:a8:
                    b5:cf:7c:70:a4:e9:de:ec:43:a6:94:78:cd:01:d8:
                    de:8a:07:e5:c4:45:ff:3e:8f:d1:c9:84:91:ac:f7:
                    ee:8b:da:63:95:0f:81:f6:eb:df:58:2c:eb:47:2d:
                    f6:2d:05:df:c3:03:43:f2:44:76:86:2f:9e:14:ec:
                    b2:05:dc:7d:b0:aa:6b:47:a0:ee:f9:bc:b8:c1:6d:
                    35:a8:19:75:48:ae:2e:07:7a:d9:32:46:28:c3:f9:
                    9b:d4:d3:10:68:54:5a:b4:29:b9:55:0e:2a:f0:8c:
                    26:ee:55:64:4c:71:17:15:a4:1e:5a:b2:ee:60:9f:
                    c4:3e:4a:a6:f9:67:43:34:e4:1d:dd:ac:74:47:2d:
                    09:ea:88:7f:e2:7f:4f:1f:b3:5c:a8:a8:0b:77:c6:
                    f7:d5:d7:9f:41:38:78:21:d3:f3:9f:fb:15:9a:1a:
                    e7:6c:b7:bd:af:51:18:33:54:cc:8d:7f:a9:9d:84:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:E7:E4:FB:01:88:2D:A4:FA:34:3E:FF:E0:06:A3:49:2F:36:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:66:c4:ca:f2:96:fc:b9:88:26:36:6f:b5:f2:56:50:85:4b:
         a1:57:8a:70:bd:66:e0:23:a2:00:93:3f:9b:02:c7:5f:d5:93:
         bc:8a:dc:50:ad:ba:be:38:90:63:38:2c:ae:21:cf:65:d8:73:
         37:14:00:c4:91:38:a9:d0:a3:ae:39:3d:07:e2:07:36:f6:f0:
         ea:11:b9:74:e3:13:5b:54:c7:b9:bb:66:9a:10:2e:1a:fc:f4:
         22:3f:94:90:70:4e:b6:78:0b:fd:13:03:62:b6:d8:00:9a:7c:
         1f:67:07:ff:8c:83:3e:c2:e1:52:39:6c:2c:91:57:e1:c2:46:
         af:3c:a8:82:13:fa:f4:5e:37:ae:31:79:5e:23:8e:34:63:f5:
         ef:ea:6a:c8:25:eb:1a:71:c0:9a:d9:bf:99:c4:8d:c3:0c:61:
         3e:c4:cf:7f:6b:39:27:ba:ee:41:09:6b:45:e8:e9:d2:9e:08:
         fd:72:78:a6:46:af:2d:8b:ac:90:3d:e4:67:a5:da:51:4a:b5:
         04:4b:ae:31:37:3f:5d:23:6b:9c:83:04:c6:be:ee:d1:02:b2:
         43:1e:03:dd:1e:fa:e6:5f:2f:62:f5:be:f0:71:a3:da:87:0e:
         44:30:7e:96:ae:ce:31:33:dd:8f:c4:24:e9:7c:0d:a2:ac:61:
         4d:67:79:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:25 2025 by rpki-client