Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9483ce8b-b8f9-374c-9fc3-35ca3b0b065c.roa
File:                     9483ce8b-b8f9-374c-9fc3-35ca3b0b065c.roa (raw, json)
Hash identifier:          Ou3arzJlv0u/4oZQ8ySkVEz72CZ2wFNHHwSgfZYStec=
Subject key identifier:   88:06:CB:6E:53:E6:91:32:EC:3B:2E:C8:E8:4A:2B:D6:19:40:E8:90
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEA9DAA6632EFADD269A0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9483ce8b-b8f9-374c-9fc3-35ca3b0b065c.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     396190
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ea:9d:aa:66:32:ef:ad:d2:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=6ad579d8-547c-444a-b867-3150c6a139a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:b2:cb:3f:79:54:28:c8:3f:71:d1:8e:d0:
                    5a:7f:37:89:c5:49:69:06:df:28:9f:a5:08:6d:3f:
                    9e:29:1d:11:e7:39:28:87:e4:28:ff:ec:86:5f:9a:
                    d5:31:17:b3:8e:a5:32:f1:4c:a0:ba:03:75:ad:e4:
                    55:96:06:bb:33:a3:ca:f3:b3:4b:78:0b:f8:e0:2e:
                    e6:5c:00:70:12:84:2f:0e:e4:ed:59:06:62:45:13:
                    b0:72:ec:db:89:62:2a:f6:b8:a6:2f:4c:e8:be:b4:
                    cb:c9:0b:34:2d:fb:ee:c2:c0:ea:56:6c:a4:f5:52:
                    34:4c:27:99:be:9a:13:e4:74:03:ff:4e:9f:73:fe:
                    20:c1:cc:5f:2b:dd:5a:85:74:e3:fe:6d:8a:86:e1:
                    8f:b6:91:fa:be:b9:30:6d:4b:48:c5:db:5a:f5:68:
                    d8:18:15:0d:8f:c4:a6:8b:d3:44:65:a5:ee:44:bd:
                    b1:8d:8c:3a:71:eb:7c:f9:b8:f6:a0:4b:4d:a4:27:
                    d2:b6:b5:b5:cf:d2:5d:a3:66:5a:fd:da:d7:ae:95:
                    32:cb:3e:4c:71:b7:00:43:ef:27:02:63:2c:1e:39:
                    b7:8f:0a:50:6a:7b:2b:00:95:d9:db:b8:58:19:e6:
                    12:d8:a0:9b:8e:3b:45:51:0e:22:0e:52:0d:f3:fd:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:CB:6E:53:E6:91:32:EC:3B:2E:C8:E8:4A:2B:D6:19:40:E8:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9483ce8b-b8f9-374c-9fc3-35ca3b0b065c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:72:8b:7c:45:30:4e:e3:58:2a:6d:90:c6:3b:69:a6:a5:bf:
         ba:a2:96:13:be:11:31:c0:d4:ad:d1:da:16:db:4b:04:9a:3e:
         d3:d9:95:b0:3d:04:be:ba:ac:23:50:1b:8d:e1:5f:f1:3e:84:
         75:1e:7c:83:8d:6f:e8:00:0f:02:52:55:6a:e1:af:a2:89:18:
         47:27:15:1a:89:b6:31:30:ea:fc:c3:e4:fb:d7:aa:df:87:e0:
         a7:26:55:62:6c:9f:40:02:a1:a8:9f:40:af:77:92:9b:3b:18:
         9e:fc:3a:02:7c:1a:30:02:06:ce:e2:36:94:bf:b6:ee:40:d4:
         74:b8:3c:3b:80:3b:31:b1:84:7b:7f:0b:04:52:c1:09:c6:70:
         9a:77:c4:ee:89:1e:31:ae:55:66:47:e4:30:62:d9:8a:72:16:
         38:af:90:40:62:94:de:6c:a7:72:77:72:0c:b8:59:24:7a:fa:
         41:a5:64:49:52:3c:2a:c6:8d:54:54:45:dc:95:9a:b4:7d:cc:
         42:94:34:fb:7a:c1:39:66:f3:97:a5:fc:4e:dc:66:fa:33:0e:
         94:0c:f6:3f:69:3d:91:59:0c:72:09:59:25:48:b3:2e:cc:63:
         8e:2f:2d:95:75:9d:31:8e:86:eb:e7:d8:61:7d:de:84:c3:7c:
         4d:43:e6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:59:37 2025 by rpki-client