Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa
File:                     a779bd3a-d039-3c50-8018-bf19bee1346b.roa (raw, json)
Hash identifier:          7D+wxFYYpVGip0ay1BR3qa7xulMgl3PtdQSFpMjEWMQ=
Subject key identifier:   08:B6:80:CD:50:C9:A9:8C:8D:04:A4:B5:4C:0E:F1:B1:09:7C:1E:8C
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F432858490021502364420044F9ACC400
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     22697
IP address blocks:        2620:2b:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:50:23:64:42:00:44:f9:ac:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=088c53e5-8074-42b7-a848-678b89e63ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0f:83:fd:08:54:ee:13:3f:ef:25:4b:c7:7f:
                    e7:13:26:e4:ab:05:05:b4:3f:ff:ef:4f:4a:db:af:
                    64:2f:83:1f:87:d1:17:65:3b:04:57:b6:72:dd:37:
                    96:b6:08:4f:05:05:d3:ef:58:45:5c:1b:d8:2b:5e:
                    cb:1d:50:77:85:ea:3d:aa:a2:53:50:98:6c:95:f7:
                    d0:d7:61:91:5f:aa:1e:2f:7b:e5:9a:98:4d:64:11:
                    2c:56:26:fb:0c:15:45:cc:6e:59:f4:25:e6:5b:0d:
                    63:6a:e0:b3:62:2e:1a:2e:d6:cf:0a:38:fc:5d:19:
                    ae:55:e7:1b:f1:81:54:4c:3c:3c:68:97:5f:71:b3:
                    b8:d2:8a:e2:39:52:1f:94:8f:ed:e0:71:61:70:c4:
                    2b:17:01:88:c8:95:63:9c:f4:cd:59:83:91:85:4e:
                    ac:92:e2:97:77:4e:54:85:8e:30:24:6a:d1:43:ad:
                    21:e0:10:27:b6:a2:1a:96:5e:2d:c3:1a:7c:ff:ba:
                    f0:c8:0f:ae:e8:d5:08:46:81:e5:b4:7d:ee:ce:da:
                    07:26:a2:42:94:3b:04:c9:85:63:a4:76:9c:bd:11:
                    b0:ad:78:da:08:16:64:d3:86:12:bf:10:0d:4b:d2:
                    96:5b:9b:68:0e:c6:bf:77:e0:5b:df:79:9a:37:3d:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B6:80:CD:50:C9:A9:8C:8D:04:A4:B5:4C:0E:F1:B1:09:7C:1E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/a779bd3a-d039-3c50-8018-bf19bee1346b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2b:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:f3:7c:7e:bb:a8:19:d4:40:34:fb:91:b8:a3:3d:7e:82:
         ca:59:b5:5c:77:64:ce:29:63:af:95:bc:61:4e:5d:a0:fb:96:
         0c:f2:82:5a:08:3e:b1:94:0b:c7:76:e5:d2:ef:6f:f5:02:50:
         2b:de:7b:44:48:04:72:3d:65:a3:b4:e6:2e:7c:2f:c2:ac:f8:
         4d:af:b0:db:39:65:6c:cd:30:47:4a:ed:a9:11:a7:8d:70:07:
         78:2e:aa:56:3a:60:2f:99:39:86:8a:64:a0:b4:27:43:c8:56:
         a4:99:85:01:a8:ca:7c:8e:e3:a6:6a:3b:03:d3:e6:60:43:4d:
         20:eb:d8:66:b6:21:ed:a7:84:3d:22:70:88:0f:b6:d4:de:91:
         47:49:8c:ba:e9:29:7e:57:35:93:0b:0d:1d:db:ba:7e:d5:e1:
         bd:33:c8:29:5d:62:02:63:cf:1b:4c:4f:1e:2a:a7:cc:a2:1c:
         df:1d:07:ff:d8:ab:03:82:04:50:71:36:c6:9b:1f:9b:9a:c1:
         ff:3d:12:18:7c:b0:bc:9c:18:4c:90:73:bd:f8:27:d6:e2:c4:
         71:e7:de:d5:f2:63:79:dd:f8:d8:56:35:1e:dc:33:e1:f5:d5:
         85:61:1b:ae:fb:d6:41:db:1e:60:77:ae:83:64:dc:4e:da:95:
         f2:90:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:22 2025 by rpki-client