Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
File:                     8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa (raw, json)
Hash identifier:          Lbtw/mRDZP+89WTVEWGzyCJaR/pX4G+7ZN/XAj8ZHi4=
Subject key identifier:   FE:C4:FE:25:05:00:2A:18:43:77:2C:9D:89:D9:FA:57:38:9A:43:A4
Certificate issuer:       /CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
Certificate serial:       010D0C9F43285848AF2B803C7C319A7D86BA2FE8
Authority key identifier: 1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:fa36::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:80:3c:7c:31:9a:7d:86:ba:2f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff55fbe-39c2-45b4-9aa2-60162d4e2932
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=ee1fa8b5-3377-436a-afbd-9d7567bfad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:ed:5c:50:ec:43:49:67:52:72:d4:73:39:
                    dc:bc:a4:5e:f7:62:7e:28:93:05:e2:e6:d6:e1:61:
                    9a:a0:15:5c:63:da:ac:89:5a:1a:9f:2f:df:d5:d1:
                    d6:2c:5e:8c:63:80:c6:eb:7f:3c:f9:96:bb:61:57:
                    3e:60:37:0c:0e:15:07:76:b7:a6:85:2c:a3:dc:14:
                    3b:6b:69:53:19:8e:2a:9f:0b:bc:d0:3a:9c:44:94:
                    cc:37:28:1a:78:dc:56:c0:92:d6:c8:ad:a9:b7:7a:
                    5f:c7:e4:b9:21:bd:7b:8e:f2:73:37:11:93:c4:1b:
                    e6:f3:98:b1:d2:50:79:22:e4:78:6a:96:b9:90:cb:
                    77:5d:d4:2f:b1:f2:1f:bc:fa:d3:f5:83:8d:36:ca:
                    50:48:6e:ee:0d:e1:d6:f7:15:98:2c:fa:72:4b:8b:
                    f6:93:6a:d9:c0:35:d7:72:af:4b:2c:5d:ec:08:0b:
                    5a:fa:38:b3:1c:c7:86:fc:a3:14:56:cf:9f:11:44:
                    73:82:a9:0e:d9:c1:6c:c8:5c:14:61:a4:af:7b:f6:
                    d8:64:73:25:a3:57:f8:2b:2e:aa:95:45:dd:92:26:
                    0b:03:84:61:a9:dc:b3:46:ae:25:81:35:df:0d:c1:
                    e7:19:64:6a:0a:b4:a3:91:cc:a1:da:3b:aa:86:cf:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:FE:25:05:00:2A:18:43:77:2C:9D:89:D9:FA:57:38:9A:43:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/8e0fe062-53ef-392d-8b4e-e877f5e254b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.crl

            X509v3 Authority Key Identifier:
                keyid:1C:FF:40:76:91:B6:60:F1:49:FC:95:03:8F:89:2C:12:4D:4C:01:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4ff55fbe-39c2-45b4-9aa2-60162d4e2932.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa36::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:36:db:9a:00:7b:e3:44:ca:28:75:63:c6:90:1e:9d:23:a5:
         4b:f5:2d:6e:92:5f:f2:6f:50:09:2a:90:b1:ac:ed:26:ae:2c:
         65:1d:a9:58:f8:77:39:fa:03:6f:c2:53:25:c3:c3:7d:0f:61:
         4e:88:0b:c1:4e:e1:44:3b:04:5a:04:48:07:8d:fa:aa:b1:26:
         27:b3:01:8c:16:c2:fc:0a:28:46:81:7d:dd:3b:34:c5:4a:b6:
         c9:cc:a2:1c:80:00:5c:41:4f:4e:e4:14:ac:b3:5d:49:ed:1e:
         1f:95:0a:cf:d0:c9:44:8b:5b:f9:2b:de:13:c0:06:ca:48:f8:
         e5:3c:e5:60:cd:af:22:55:b7:85:a6:bf:c4:a4:2f:5a:43:34:
         5e:bd:04:a6:3e:c7:89:f5:72:8f:52:03:2a:aa:d2:4b:08:f0:
         6a:fb:71:b6:14:07:d5:a6:d6:9b:51:7e:ad:cf:9b:cc:d4:e7:
         9f:a7:31:49:c1:66:9f:b4:1e:84:c8:d7:79:fc:8d:01:2f:8a:
         be:22:1c:47:40:14:a5:1d:7b:74:61:aa:df:73:45:4a:63:3f:
         6b:2c:cb:43:6f:aa:30:c5:f7:60:87:3c:0e:0c:48:0f:11:0b:
         8c:2f:93:a4:63:04:d8:97:d4:65:b0:34:2d:7d:49:87:0a:81:
         0b:84:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:01 2025 by rpki-client