Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa
File:                     ca79c64b-eb6d-3434-8473-70559314df53.roa (raw, json)
Hash identifier:          WTM4iKmfmUncd3WAwq8DxvNnzJV/bfxpfF2/djxV1ho=
Subject key identifier:   E7:58:DF:8B:46:7D:86:AA:C6:34:30:2B:3B:CD:8B:A1:4A:38:9B:C8
Certificate issuer:       /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
Certificate serial:       010D0C9F43285848C2B64EBC9CA8BBED2A630F00
Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:197:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4e:bc:9c:a8:bb:ed:2a:63:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=4ed5273b-c72e-45e6-a716-0b99d6c4889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:ec:fd:57:a1:73:6f:6e:f3:85:2a:be:6b:
                    8c:62:94:f9:6e:c2:63:32:75:5b:fd:3b:09:4d:5b:
                    22:d3:d8:62:44:e5:f1:1e:31:aa:a9:eb:a5:80:d0:
                    1f:12:bc:ec:55:21:1a:f6:56:7d:e9:ec:81:4f:dd:
                    f4:35:06:93:8d:f1:8e:7b:f4:31:2b:f2:a7:92:66:
                    66:0c:75:0a:ea:c3:dc:6c:e6:a2:1b:7e:58:a9:05:
                    47:9a:43:2e:d7:d2:2d:76:60:1f:63:c3:ec:6a:98:
                    4f:03:e7:89:73:2e:49:25:24:cb:29:58:a0:76:70:
                    fd:70:0c:05:7b:9a:bf:bb:7a:32:ad:9d:f6:67:b2:
                    64:bf:89:85:83:50:16:83:6e:75:90:4e:58:c2:d6:
                    66:2c:5b:74:91:a7:bd:12:ea:d6:66:be:53:52:a5:
                    5f:06:af:95:d1:fb:fb:9e:07:74:fb:89:d1:b0:af:
                    09:e6:5d:9f:a8:7f:fb:3b:0f:47:61:70:da:84:c6:
                    75:05:48:c8:ef:d7:f4:a4:22:e5:c0:ee:b8:67:b2:
                    c3:df:e1:23:46:98:32:19:0c:89:b2:83:ce:fb:4c:
                    0f:cd:41:e7:93:11:bd:93:73:d0:24:57:68:31:a2:
                    e6:8c:1e:03:5a:7a:56:6d:41:1a:f7:45:51:41:b2:
                    ca:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:DF:8B:46:7D:86:AA:C6:34:30:2B:3B:CD:8B:A1:4A:38:9B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/ca79c64b-eb6d-3434-8473-70559314df53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl

            X509v3 Authority Key Identifier:
                keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:197:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:49:0f:39:ae:4e:90:1e:0e:1b:62:fb:ef:b8:f4:0e:49:
         04:09:dd:c2:21:48:5b:a0:fb:58:64:d2:e1:0c:b4:6b:b1:4c:
         e0:6b:49:3b:f6:87:9f:95:19:07:e4:7b:47:fa:9c:ef:9e:8e:
         50:2c:78:93:8c:6a:ab:4c:28:91:df:b1:0e:b1:9d:0d:94:6f:
         fe:9f:0a:53:f8:40:37:f8:86:dc:cc:40:75:79:3f:25:d4:08:
         bb:63:b6:bd:69:c4:66:5e:1e:c2:8e:54:ed:fd:72:fd:14:12:
         9b:be:3c:ed:c0:49:99:33:35:ca:2c:c8:41:ea:38:b2:d5:65:
         8d:41:0b:76:55:80:0e:fc:4e:01:8d:9f:2a:b9:dd:13:e0:79:
         c6:3f:a5:22:a3:41:7e:a2:e8:be:a1:6b:8f:15:15:35:f6:d9:
         7c:2f:cf:4f:c5:11:10:75:49:cd:c8:72:51:a0:b4:99:ed:60:
         52:95:4a:a2:f2:f8:f0:f7:f8:1f:54:9f:b5:11:a6:78:3d:ee:
         fb:77:11:b1:19:3b:a8:ef:83:0b:4a:c0:af:6a:e2:46:8d:98:
         cd:7b:43:cf:29:27:66:fc:5c:95:ee:bd:62:b8:d8:23:8c:4c:
         24:23:d7:81:51:70:45:42:43:62:a3:56:9f:7f:3d:e3:c3:6c:
         69:ac:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:50 2025 by rpki-client