Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
File:                     ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json)
Hash identifier:          G74bbX+E+Isqe9sfCgEWYZIVTjSGKsyoADKuAcq9N8o=
Subject key identifier:   AD:F7:7C:A3:32:B2:80:C9:BB:5B:C0:FD:3C:02:E3:C3:37:4C:3F:26
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F4328584858A04ED00B81EA397C34D6A0
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     25875
IP address blocks:        2607:9f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4e:d0:0b:81:ea:39:7c:34:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=bb7e41d6-83f7-4313-97c4-dd34fb83afe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:7b:b7:2c:53:48:d7:68:9a:a5:cf:ad:3d:
                    e2:90:c8:91:19:d8:12:1e:48:60:b6:55:2d:60:93:
                    67:90:50:33:50:50:6f:f3:75:42:06:05:44:21:99:
                    72:eb:b1:4e:9e:9e:ca:aa:4c:37:1e:e9:f5:47:06:
                    bb:00:f6:9f:c4:47:cb:61:b1:73:d5:e0:98:4a:17:
                    f2:16:16:c8:d6:b5:34:16:ad:25:8d:50:b2:c5:c8:
                    5f:43:b3:52:f7:cd:7b:90:1b:6b:c6:48:56:3e:a7:
                    06:06:cb:d6:3e:82:73:97:9e:7f:b1:d6:56:aa:a9:
                    9e:f2:b3:06:75:32:19:be:fb:d8:54:78:06:b3:ba:
                    b7:de:03:95:89:ae:73:61:c4:62:b5:34:c7:d2:ef:
                    42:c5:97:4f:24:09:5f:85:a5:5a:c6:9a:fe:ea:77:
                    44:4d:8a:99:8c:e2:e2:d9:48:c1:a4:73:e6:82:98:
                    8d:d9:5a:ec:03:f8:15:e5:15:4f:a7:e7:27:ef:17:
                    04:6b:31:20:41:b4:d3:40:3f:5b:34:07:91:d4:7b:
                    ea:95:d0:40:f9:d7:45:a1:5f:41:df:ef:5d:b3:c6:
                    74:6c:d5:5c:f4:6a:06:e1:14:26:41:32:0e:43:53:
                    4d:44:11:ee:e8:fe:7c:87:11:9f:42:15:d6:da:ca:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:7C:A3:32:B2:80:C9:BB:5B:C0:FD:3C:02:E3:C3:37:4C:3F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:f8:39:15:a7:27:ac:45:14:0a:66:0f:1a:6b:e4:e8:54:
         2f:15:14:02:c0:9d:8b:ba:55:ad:5b:e8:6e:6f:0d:76:ae:25:
         e1:a9:ca:86:44:a2:87:84:74:1e:30:32:23:d9:83:d7:0e:7a:
         72:6a:2c:fc:29:e3:fa:f3:51:9c:51:8a:6b:47:88:ec:bf:34:
         64:d4:1b:15:59:c0:02:a7:46:da:2d:33:b0:a5:09:52:29:5c:
         1e:70:dd:5f:75:7e:aa:c1:bd:c0:62:98:db:40:38:6f:43:04:
         9d:2a:e3:87:5d:bd:b3:f4:03:04:fa:56:a9:b1:a4:f1:34:bf:
         36:3d:71:aa:76:93:da:cb:0d:a9:c1:89:ae:5b:3b:5d:f6:a6:
         44:28:08:6c:d4:62:43:e1:05:b3:68:e1:6c:fa:4b:dc:53:37:
         c8:3c:1b:4f:6a:b4:e6:88:df:7a:55:0e:d4:62:2a:a8:75:8e:
         7a:ff:c9:77:a1:28:b9:9a:4c:6d:77:71:22:f1:81:de:3b:c5:
         10:a4:34:ce:b9:ca:50:e6:81:1a:06:94:46:c5:1a:b0:7d:cf:
         17:e9:77:de:b8:41:62:0e:9f:2c:ff:bd:e5:62:91:ae:3c:f1:
         e2:9a:eb:d6:4f:20:0e:24:d5:79:74:97:87:41:c9:12:a0:c2:
         ca:9d:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:16 2025 by rpki-client