Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
File:                     a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa (raw, json)
Hash identifier:          51prFBCejTal97oh2qo9IB5XGet8/9w2wuLTetQOm8Y=
Subject key identifier:   C2:5E:1E:C8:68:8B:69:66:56:5A:E7:A8:9B:8E:C2:B3:91:54:3A:90
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848159FDDA615C58ECDFFFE2F00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30128
IP address blocks:        2001:500:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:dd:a6:15:c5:8e:cd:ff:fe:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=5d031c40-878e-4634-b7e0-d3042eb0d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:61:4f:e8:34:80:56:f0:0d:f5:a9:13:0c:
                    27:75:5d:41:39:0b:f9:20:ad:fd:d4:0a:9a:21:67:
                    fc:f8:d0:dc:69:d1:d1:c7:41:ea:24:0e:03:a1:01:
                    1a:89:9f:36:9d:59:f0:49:0b:e8:c8:9d:a1:e0:96:
                    2b:35:0e:80:4e:92:59:dc:10:40:62:8e:e2:90:5c:
                    e1:0f:34:a5:20:62:f1:30:e1:20:64:f9:9e:c9:c9:
                    b0:04:d7:55:69:94:d8:a6:81:c0:7c:ec:52:22:8e:
                    b7:2e:cb:6e:b5:50:e9:0a:dd:c5:72:b9:b4:29:3a:
                    c8:bb:b0:f3:99:54:db:b5:33:30:2e:94:a2:dd:b5:
                    7f:96:d3:ed:85:97:53:31:ac:68:80:b8:23:6a:52:
                    8e:2d:77:6d:80:76:9f:ff:9e:d8:46:d6:60:12:4b:
                    48:27:ca:1b:34:91:91:b4:18:c1:99:52:98:5e:7e:
                    95:b4:4e:5a:81:51:95:ef:19:f1:1f:2e:81:04:22:
                    e5:5e:0d:62:59:5b:1e:57:82:d7:00:ea:a1:bf:cd:
                    b7:80:27:e5:b1:59:a8:e4:c6:6a:38:ca:db:82:c3:
                    1e:1d:12:e9:d8:92:71:8d:5f:46:1b:e9:27:5c:a0:
                    77:fb:1b:5a:db:db:3f:8f:6c:d9:ce:75:85:a9:af:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:1E:C8:68:8B:69:66:56:5A:E7:A8:9B:8E:C2:B3:91:54:3A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:db:e7:3e:9e:6e:ca:fc:10:0e:5f:8e:38:d6:cd:19:89:c7:
         b1:d1:94:5d:9a:ac:60:76:da:40:e2:59:1f:98:b3:e5:a3:28:
         16:f6:d6:15:2a:34:38:1d:ab:7b:f9:da:da:3a:9a:2c:8d:5f:
         5c:e0:89:e0:0e:47:54:bf:41:cc:cd:01:82:2a:69:ea:f9:11:
         29:8c:9b:94:67:d0:52:b1:94:72:fe:29:17:dd:b4:33:92:0b:
         d9:bc:e7:27:f9:74:7a:55:3f:59:ed:29:40:85:2e:ff:7e:41:
         8e:2c:a4:b5:64:67:42:05:51:0b:39:c0:11:cf:0d:74:2f:45:
         ab:e6:42:7a:2a:04:11:8e:5c:df:9a:ab:be:f1:1d:3f:e3:ef:
         06:ef:e9:2d:cd:d9:c0:c4:52:06:5f:e8:e4:d9:d6:47:26:09:
         c3:d9:9a:30:73:59:4b:db:6e:c0:82:38:16:c7:93:44:db:5d:
         c6:79:db:4d:34:7a:45:7a:0a:69:0c:39:1e:fe:0e:fe:01:ff:
         a3:02:3d:27:76:c7:87:0d:2a:52:3a:88:0f:61:48:ad:93:e6:
         e0:70:fe:e0:25:00:45:ee:f2:b9:01:56:44:a7:db:59:d5:85:
         40:a9:31:18:21:75:2e:70:aa:c7:6f:22:cc:a0:98:8c:b0:0e:
         c8:05:7e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:04 2025 by rpki-client