Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/0013b085-23b3-3b88-adb0-4d1bbd6c8d8a.roa
File:                     0013b085-23b3-3b88-adb0-4d1bbd6c8d8a.roa (raw, json)
Hash identifier:          o7JrEteO5Omt1RbYXMnkvy3OV9CDT5G+pCzFn7SXots=
Subject key identifier:   32:9B:97:77:27:26:75:98:08:39:1A:84:EB:05:5F:A2:CC:44:0C:92
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285848AF2B891342D51992C3AC4F80
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/0013b085-23b3-3b88-adb0-4d1bbd6c8d8a.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     48231
IP address blocks:        2602:f9a9:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:89:13:42:d5:19:92:c3:ac:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=86bd0f9d-4131-404d-924f-993d3032faea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:a5:04:5f:9b:2b:c2:64:25:b3:06:1f:c8:
                    67:d4:34:15:11:a9:1f:de:5c:e4:07:fc:8a:b9:f4:
                    9e:0e:84:85:16:8e:54:a0:8c:1a:01:e4:1d:32:d8:
                    49:b9:8c:ff:f0:6e:ca:c8:9b:a7:9e:3e:d1:ea:0b:
                    84:f6:ed:07:7d:20:40:85:6f:84:f6:ca:4d:e8:e5:
                    76:a7:7a:ca:89:a7:ca:51:5a:e9:94:cf:83:01:a7:
                    10:fc:5a:2f:03:95:66:7e:dc:76:e2:87:a2:0f:e4:
                    d7:37:cb:b6:8b:db:43:61:c1:0f:6f:c3:95:51:ba:
                    04:7d:86:c1:9d:3b:8f:97:69:67:a7:8a:79:18:a4:
                    49:6c:05:fb:c8:62:92:b1:01:0a:44:4d:be:03:49:
                    66:25:32:56:50:25:8e:0f:58:cc:91:23:c3:ae:4d:
                    e0:fa:b7:5e:4a:7b:e5:ef:cb:33:a8:c7:b4:34:45:
                    b3:56:60:39:87:c1:8c:eb:b7:b0:55:84:b0:c6:96:
                    67:0d:70:93:8c:be:67:89:93:26:bc:c8:19:4e:dc:
                    c3:81:5f:f3:13:75:73:e1:2b:7d:18:e7:4d:db:a2:
                    43:95:c8:92:bb:78:d7:73:36:fc:0e:47:88:85:82:
                    c8:c8:76:8a:2f:65:33:f3:af:a3:00:03:45:14:25:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:97:77:27:26:75:98:08:39:1A:84:EB:05:5F:A2:CC:44:0C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/0013b085-23b3-3b88-adb0-4d1bbd6c8d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:93:82:ec:a0:d4:7a:fb:59:75:4c:25:7f:ca:97:1e:26:d5:
         1d:56:ce:31:57:25:99:64:a1:f4:88:0f:f9:e5:ba:85:c0:aa:
         68:ea:bf:d7:74:f6:da:b2:2c:4c:19:4a:26:ed:35:ca:d5:44:
         69:74:9c:08:05:61:69:19:f8:17:10:3f:1c:c5:f9:fc:0e:37:
         d8:bd:11:53:cf:29:24:1b:48:79:14:f2:7f:9b:7c:15:ab:3c:
         95:26:f7:eb:00:04:69:d9:7f:56:f2:54:16:fa:65:03:80:fc:
         d5:64:bb:96:e6:e2:48:f3:03:9c:6b:fd:31:61:38:11:1c:8a:
         5b:c6:e8:08:12:ed:0e:95:90:0d:3d:7a:d8:32:77:32:4b:67:
         bb:33:e4:b9:1f:5b:62:2c:6b:a5:cd:e4:f4:55:23:81:4a:96:
         c8:90:e6:17:7d:d8:e5:31:6f:0c:28:62:26:90:a2:86:f1:25:
         03:72:ee:f1:d2:27:11:2f:11:4b:22:b8:21:f6:68:1b:24:f5:
         37:f7:77:3c:da:b9:a9:db:2d:9c:55:d8:6a:4c:d9:2d:48:4c:
         eb:da:b0:ff:cf:8d:bd:07:1e:70:a1:08:63:fb:8c:1c:ce:d6:
         88:9a:e4:f7:ae:6a:09:6c:28:b8:16:03:c4:8c:d9:d4:2f:2a:
         f3:4d:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:55 2025 by rpki-client