Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
File:                     4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa (raw, json)
Hash identifier:          CYtNTLpYBFWQ4No4p9QmUMX3ILrVL2sJhrSeUr4Knps=
Subject key identifier:   CF:7E:2C:DC:B6:05:79:B1:C1:26:3E:55:36:51:63:6D:EF:62:10:5A
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584950F963544E141A1918B97600
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     50131
IP address blocks:        2605:fb80:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:63:54:4e:14:1a:19:18:b9:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=54ae4d21-52c9-4937-ba1b-dd8d8d68405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:c0:f8:f2:69:a3:1e:e7:e7:20:cf:6f:8f:
                    51:ce:29:8e:ea:81:2d:13:89:05:7e:ee:a4:b7:81:
                    9c:98:61:d5:fd:c1:c4:70:5e:3e:48:31:87:c9:70:
                    f2:2c:0b:65:81:bb:04:03:ba:d5:9c:99:90:3d:c6:
                    a6:6e:0a:3e:a3:7b:80:57:2e:d7:70:e0:92:eb:00:
                    f6:94:42:9b:2c:9b:8a:c6:68:8e:5e:d5:ba:5c:d1:
                    f9:49:ff:12:80:60:4b:c1:52:f4:e3:24:d7:c2:cb:
                    0c:f5:da:75:f7:e6:8b:fb:81:28:fb:e1:86:ea:1a:
                    29:ea:cb:bd:ee:f8:64:7e:13:04:73:d1:c5:0d:c8:
                    0f:46:ca:55:87:cc:48:27:a8:9e:31:3d:11:7a:c3:
                    ed:7b:ca:c3:c9:db:17:d3:04:22:e1:9e:f5:8a:4a:
                    9c:33:90:25:d3:02:ec:1f:5a:02:35:0a:fe:b9:6c:
                    13:d4:ea:93:20:ba:4d:05:b7:7c:65:a2:80:6d:d7:
                    fb:81:a0:90:8e:2f:c6:99:c1:ab:c5:7c:cd:0a:fe:
                    a1:a8:78:d3:b6:14:c1:fc:05:3d:ce:16:14:ae:3e:
                    31:2d:95:a6:4a:f7:40:d3:fc:22:c1:2b:0c:76:84:
                    a4:37:d3:51:22:f8:51:32:8c:d0:86:9b:e1:7d:17:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7E:2C:DC:B6:05:79:B1:C1:26:3E:55:36:51:63:6D:EF:62:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/4df2d60c-fcbe-3c61-96f8-141e97cc8c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fb80:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:30:d1:d0:b3:1c:c8:3c:a9:95:ec:fb:c5:3d:c1:89:9a:99:
         ea:91:7d:be:7c:b9:e7:96:1b:fb:dc:fb:68:79:ee:67:b7:1a:
         05:13:de:8b:e2:b0:63:fc:ff:8a:f1:31:ec:55:70:e4:e6:25:
         5f:97:34:f6:5e:5b:21:02:5a:8c:6f:67:57:03:67:9a:c2:ba:
         53:2e:70:2a:c1:ef:a7:55:b4:38:86:6e:df:b2:19:42:5b:df:
         43:f6:71:cf:05:1d:81:3f:66:ff:22:a7:97:10:9b:14:55:71:
         24:5f:13:9b:a2:f0:fc:4f:c4:1b:c6:43:ec:32:53:b7:11:62:
         55:67:5c:26:15:d9:f5:e8:be:4f:ea:0e:b1:d4:f6:c5:cd:d9:
         a2:61:3e:84:8e:7b:b7:19:36:c2:c3:36:b7:87:bd:f3:20:2b:
         c4:01:7a:ad:02:20:dc:65:b2:93:b7:74:91:d3:9b:22:75:50:
         00:50:76:19:ad:82:e5:b3:d9:60:dd:7c:3b:6e:70:76:23:f2:
         aa:3e:46:d9:52:8d:77:5c:26:d9:2b:1d:18:ce:5b:16:33:dd:
         5c:2f:de:f1:69:44:a5:62:76:50:c8:64:b1:11:9e:a5:9a:49:
         33:d7:2d:dd:4e:e3:ae:f5:86:44:2c:8e:b4:73:8b:34:05:ad:
         13:e6:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:50 2025 by rpki-client