Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa
File:                     624ae083-7c0d-3756-8e51-797f328df78a.roa (raw, json)
Hash identifier:          S8IUoQng/gvzUzpZB4Qs+w+GPbjCTrh2uHjb2KSh+Ok=
Subject key identifier:   5B:AA:7A:34:DC:35:56:B7:E8:51:E2:95:A4:94:65:0D:AC:0F:95:EB
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285848AF2B863EFB51D7CAEC36CDC0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     19651
IP address blocks:        2602:f9ec:f0a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:86:3e:fb:51:d7:ca:ec:36:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=4f935210-76e0-4361-96c7-e4fd4e7de192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:50:41:22:1e:33:68:6f:12:99:4e:ac:ad:e0:
                    fd:c3:e7:a3:aa:fa:4e:ce:34:c0:28:54:e0:87:c5:
                    1e:d5:b2:10:c0:56:78:90:39:22:ea:11:a9:bf:b5:
                    db:5a:cf:da:d5:ec:fb:e2:96:c9:c9:00:f6:a2:13:
                    37:4d:c3:db:63:55:c6:9b:24:2d:52:1c:6f:f4:e6:
                    13:86:7b:e9:5c:0e:ba:15:57:97:9f:09:62:db:bc:
                    28:29:ed:7d:71:c2:ea:62:0a:44:fe:ab:4c:56:41:
                    06:eb:94:7a:f2:e7:38:fc:bd:ac:31:3f:ad:f8:21:
                    69:0a:e1:9d:0c:8a:05:39:8d:30:29:78:b8:9c:08:
                    7a:f6:f3:3a:45:2d:c7:c1:4c:ac:cd:f0:b4:36:cc:
                    9b:af:f8:76:79:fc:6d:56:07:14:cd:5c:f4:03:fa:
                    50:1f:91:c4:8b:5d:5f:c3:3f:1a:29:f8:f5:ca:2a:
                    0e:75:24:a0:fa:58:79:ec:a2:f2:de:fd:33:6a:3b:
                    45:1c:f7:c1:d2:d9:0d:08:82:ab:fd:29:41:0f:27:
                    7e:9b:80:99:c7:db:f1:62:81:88:58:6d:14:04:67:
                    8f:79:3c:33:79:56:d2:e4:4a:7e:95:fa:29:ce:b4:
                    23:5a:3d:98:bc:21:cd:19:fb:b6:a2:a8:12:2d:1e:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:7A:34:DC:35:56:B7:E8:51:E2:95:A4:94:65:0D:AC:0F:95:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/624ae083-7c0d-3756-8e51-797f328df78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:f0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:9b:05:c0:28:20:d0:83:a0:af:67:2e:9d:19:d4:13:c8:
         eb:19:31:f9:6a:a7:04:6f:16:27:ee:b5:5d:9f:30:12:16:97:
         03:4d:75:11:7e:ac:32:cb:d1:48:89:79:10:56:be:a3:35:65:
         f5:44:8d:7d:2a:e6:1e:84:d2:71:95:ec:bf:4f:b1:2b:c9:01:
         c1:2a:af:e3:83:7e:48:20:3c:f1:54:77:c0:9a:67:1e:62:68:
         2d:5b:e0:72:8a:0b:10:08:27:b5:e2:95:9d:6e:5e:33:03:98:
         b8:1e:51:a1:1a:e8:c3:5d:5e:ba:3d:9e:0c:40:b6:a1:36:23:
         49:7b:bf:a8:80:62:b9:bd:95:58:63:4e:7a:58:7e:3e:ba:20:
         27:e1:38:65:01:6b:7f:b7:80:b9:83:6e:27:9b:03:e9:ac:17:
         a3:b3:83:de:97:0a:75:42:38:4a:0c:2c:42:4d:0a:91:33:2c:
         ed:d8:53:e8:d7:21:b5:94:25:bc:09:c5:2f:f8:0d:be:4c:6d:
         c4:4e:fb:9b:92:d0:15:2e:7a:14:25:1f:12:63:98:6a:1c:8a:
         27:10:e2:df:2b:34:9d:83:37:11:96:bf:27:1d:e2:0d:8c:55:
         58:c0:4c:41:1e:6b:f5:a0:d6:36:ac:23:70:4d:0c:1f:2c:64:
         5b:ec:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:29 2025 by rpki-client