Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa
File:                     a819ac3c-53f9-309f-af4d-ef75056c2aee.roa (raw, json)
Hash identifier:          rgIOS8aSdOmRU/qirMTZ9BqK1mJch4+5UUogynG9kVo=
Subject key identifier:   1A:20:98:99:BC:23:78:EF:31:35:7D:02:05:0B:E5:62:F5:DE:AC:60
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285848159FE34E8EB52DDB2E05A280
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30133
IP address blocks:        2001:500:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:e3:4e:8e:b5:2d:db:2e:05:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=d572b6d8-3a26-4c6a-b0d0-5fd104ca67ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:9b:92:69:d1:49:d8:ec:1c:68:ef:18:6d:
                    b9:64:36:22:89:86:56:15:8e:98:47:16:c5:83:95:
                    f4:22:6f:71:2c:8d:1d:95:4e:23:7d:31:f1:c6:ff:
                    01:42:24:58:93:cf:55:dc:75:3c:28:1e:36:23:6d:
                    8b:14:87:39:54:30:39:50:f2:a5:0e:02:c9:cc:44:
                    48:ec:56:8a:2c:ba:df:1d:9c:81:8d:66:34:f6:3d:
                    12:91:3d:8d:6b:21:00:ed:0d:6a:98:6b:d1:34:80:
                    e2:9c:c0:4d:7e:42:87:6b:fd:fd:e0:3f:de:e5:1e:
                    ca:1f:5c:62:f3:5b:f3:aa:35:3d:42:bc:68:5d:34:
                    24:79:d3:30:c6:b3:18:75:d7:08:67:0e:c8:72:ea:
                    f1:73:fd:db:f7:2d:cc:df:dd:ee:10:1f:32:51:2f:
                    34:cf:d9:c4:d9:50:10:21:e3:b3:78:e3:73:7b:4a:
                    c7:7a:ca:5c:1e:27:bc:6e:d7:d2:c1:c7:9e:26:75:
                    1f:ab:33:94:d5:3b:5e:29:ba:72:58:7e:d9:b6:7c:
                    3f:6d:91:0a:b3:02:3c:66:b3:32:cb:88:8f:4d:5c:
                    78:3a:73:e2:fb:b9:0d:ce:81:c7:32:c7:e1:60:14:
                    64:9c:b9:7a:e7:e1:27:b0:0f:a2:0d:1d:f8:b6:b2:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:98:99:BC:23:78:EF:31:35:7D:02:05:0B:E5:62:F5:DE:AC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:dc:bb:2a:7f:03:b8:46:47:f3:f8:83:d9:05:6e:53:09:
         e2:86:04:9a:e8:a4:9d:4e:47:81:74:0e:90:ed:55:b3:5a:9a:
         a9:bc:cd:eb:8e:3c:c2:b8:97:9b:a5:4c:10:b6:de:4b:13:74:
         5f:35:bb:8e:ef:3d:be:b8:4c:1d:a3:83:d9:3f:25:65:26:c5:
         e6:62:c2:9c:df:e4:94:8d:20:ea:d9:6f:90:04:30:13:74:3c:
         75:9a:4f:1a:7e:37:5b:d2:3d:17:21:78:6a:11:7d:6c:db:4a:
         22:8e:d4:12:b9:b1:53:41:cf:7a:41:2c:09:64:54:0d:7e:dd:
         d5:37:d4:c0:64:7a:0c:05:33:89:2d:bf:e3:59:90:30:49:47:
         85:e5:bb:93:17:de:b3:10:ae:8e:17:00:5c:98:67:45:2d:99:
         10:b1:fd:0b:54:9d:0e:5d:4c:f9:0d:3e:fc:d5:35:10:9e:77:
         9f:19:fd:91:91:07:f3:4e:b2:ff:93:73:1b:e2:c1:51:24:02:
         b4:ac:92:69:9f:40:1d:90:78:fb:cc:4e:54:44:a8:d0:b7:3e:
         35:0c:9f:36:93:9e:3a:e0:b2:a1:9b:4a:f9:83:02:8f:b3:fd:
         95:e5:00:09:08:8f:ea:00:80:e7:da:8a:db:06:40:45:31:51:
         66:63:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:37 2025 by rpki-client