Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/5fd664d1-c333-3225-9a56-f6a98ca5d80f.roa
File:                     5fd664d1-c333-3225-9a56-f6a98ca5d80f.roa (raw, json)
Hash identifier:          fauPupKIu7v+BXM6u2zYDhG27wJZZ8bu8O2eOv9P+KQ=
Subject key identifier:   2D:CC:21:35:79:93:0A:9C:6E:8E:E1:AD:A9:BF:66:A5:D5:AE:AC:B9
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584953C40F5B3A44C2E03E1EBD80
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/5fd664d1-c333-3225-9a56-f6a98ca5d80f.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     63311
IP address blocks:        2607:fae0:f200::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:0f:5b:3a:44:c2:e0:3e:1e:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=cc1f8d7a-3e98-421f-b9a0-00b16011f8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:48:6c:0d:2d:24:c9:92:db:a3:7e:37:a9:
                    0c:ec:b0:b9:97:f4:f7:73:9a:47:94:bb:86:20:0f:
                    1a:3a:58:4c:c8:4d:90:f0:9c:b8:8a:15:13:59:93:
                    35:8f:14:02:54:98:5a:c6:95:37:34:3e:7c:22:a4:
                    17:e6:35:05:86:1f:3e:71:02:83:9f:c2:ae:29:66:
                    96:8e:61:aa:1d:3f:8b:bb:3f:35:71:e8:51:df:bd:
                    c7:97:34:ff:27:79:dc:57:a4:f4:76:ed:60:a6:c5:
                    a9:09:3f:9a:6b:c1:7e:28:c2:8d:fe:64:97:80:36:
                    07:e5:94:34:49:53:96:60:c9:5d:bb:07:a8:d1:6d:
                    e4:0a:fa:c5:8c:ff:15:81:4c:e2:5c:66:7f:5a:16:
                    f4:ea:4f:d8:c6:cb:92:e6:d2:72:40:91:f8:b9:df:
                    de:ec:ec:b7:83:ba:88:15:40:d4:4b:59:e9:1f:f1:
                    7b:7c:dd:f3:2b:69:02:a6:92:5d:38:4e:c7:c0:01:
                    e6:1b:0d:e2:69:97:be:d6:b7:95:9b:23:f0:68:d9:
                    75:74:87:36:c4:bf:ea:76:ff:fe:b8:c8:60:ac:91:
                    c5:75:2a:d9:27:e1:92:0a:01:bd:62:94:ac:18:c3:
                    e6:cb:e4:39:1d:40:dc:f5:7f:15:4d:a7:66:51:39:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CC:21:35:79:93:0A:9C:6E:8E:E1:AD:A9:BF:66:A5:D5:AE:AC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/5fd664d1-c333-3225-9a56-f6a98ca5d80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:f200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:33:58:0a:0b:01:e5:f9:4c:c2:26:c7:98:dd:dd:cf:3b:
         8d:54:22:22:7c:4c:ea:73:9e:29:ff:4c:56:88:0c:69:da:de:
         ad:31:4d:56:d0:98:35:11:0f:35:40:63:60:f2:04:ec:77:d7:
         c8:a3:8e:b5:7e:c3:0f:21:8a:72:84:31:22:df:9e:61:64:3a:
         3e:5d:5f:c9:81:8b:8b:d4:75:f1:28:d4:5a:ea:d5:99:6c:b2:
         b7:c9:e4:4f:40:16:65:a0:e4:bb:6c:85:95:51:f4:0d:95:a2:
         52:6a:76:fe:e2:ba:bc:15:01:26:aa:32:c9:5f:79:dd:3a:e7:
         15:a6:86:b5:8d:3e:e7:23:61:b1:79:af:ee:62:46:59:52:59:
         25:15:1d:d3:8d:62:dd:53:f9:0b:4d:aa:b0:34:25:01:85:75:
         82:8c:27:69:25:30:fa:95:2c:84:6d:df:b0:50:c4:82:8b:3c:
         f9:25:8c:b4:9b:1d:02:46:d3:eb:66:04:b3:68:ef:05:42:24:
         53:e8:26:36:3c:bf:f9:7c:20:da:88:8a:b3:5d:68:d9:8f:45:
         25:e4:eb:28:34:b2:b5:5c:be:28:75:cd:8c:6d:95:27:a7:f6:
         b7:99:da:ab:70:1a:43:38:35:48:4c:6e:fe:82:5b:c5:a9:c8:
         c2:25:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:43 2025 by rpki-client