Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
File:                     57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (raw, json)
Hash identifier:          c6H3J8rREUaKYtZx8z5V0kHmznufr7ej3jwYwSMHZ1A=
Subject key identifier:   42:74:B7:BA:9C:64:6B:DE:79:23:34:5A:A1:47:F1:B7:06:6B:C1:21
Certificate issuer:       /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial:       010D0C9F43285848E16BED67CBF2F53A42A58100
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     1030
IP address blocks:        2602:f9d5::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ed:67:cb:f2:f5:3a:42:a5:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=c579d160-41c7-48d6-a10c-6b2b78b6904b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:67:c5:97:55:d0:99:f5:e5:63:97:da:6d:d0:
                    93:ba:0c:18:e6:52:7e:17:db:ed:89:b5:19:a7:8d:
                    ee:e5:61:9b:bc:0e:d9:a1:ff:c2:b8:e9:3e:05:1d:
                    49:58:3b:70:15:2c:f6:f3:8e:0a:8b:38:7c:f7:8a:
                    a0:3c:cc:b8:eb:32:df:e3:64:e6:47:41:7b:12:c0:
                    c5:56:a7:7e:2d:8c:74:d4:cd:68:72:f7:62:9e:ef:
                    e4:90:eb:97:f6:ec:fe:31:8d:b9:69:6c:91:9d:81:
                    a4:76:e8:4e:af:60:ac:b9:cb:69:ec:a2:0a:96:35:
                    dc:4d:01:b6:a6:06:3e:e2:47:29:68:7f:b3:54:02:
                    ca:54:13:4c:7e:cf:53:7c:ba:e3:b9:76:b4:7e:a6:
                    70:50:1c:c5:99:1b:40:96:4d:91:91:9d:9a:f7:c7:
                    6b:8c:d7:32:df:09:4b:b1:e9:2b:da:ee:23:f2:f9:
                    62:f2:b3:33:ec:76:a1:47:ae:9b:7d:4b:84:c4:7c:
                    a4:ee:7a:9e:9d:80:76:d7:4a:f5:60:88:2d:ce:eb:
                    81:48:4f:6d:13:54:b8:36:2a:cd:36:c7:41:91:3b:
                    0b:27:be:37:57:a3:78:be:8f:5c:8d:f0:0e:b1:f2:
                    a1:88:6b:3e:e5:28:0b:cd:1d:1b:26:2b:58:22:a0:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:B7:BA:9C:64:6B:DE:79:23:34:5A:A1:47:F1:B7:06:6B:C1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl

            X509v3 Authority Key Identifier:
                keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:02:30:e0:c6:37:4b:50:18:9b:d1:fb:0e:da:cb:fa:19:
         3b:7f:25:bc:ec:a2:29:5a:e4:70:bf:c5:ad:86:6c:72:53:4c:
         e0:57:bf:7f:25:42:23:4a:72:d3:2b:e3:99:6f:fc:fd:47:62:
         89:67:15:21:9a:ef:03:f0:8c:0e:7b:5d:f9:9f:9f:cc:b9:28:
         a9:62:73:89:58:1e:58:a1:92:f8:01:52:ae:d2:67:21:bb:9c:
         44:f6:37:13:0b:c4:8e:5f:95:50:37:03:49:d6:01:95:c7:87:
         63:ce:fe:92:fd:14:93:c7:eb:80:5b:59:f5:f8:b6:59:76:76:
         ad:bc:88:f2:9e:ee:ce:a3:27:e8:f1:4e:95:7f:ae:af:47:c8:
         cd:d8:af:f6:a7:83:8f:95:c0:04:38:6f:62:2c:0f:98:3e:b5:
         a4:a0:49:21:a7:aa:c2:5d:6f:b7:7b:83:25:cd:aa:e7:62:c7:
         6e:90:e0:55:b0:fd:72:9b:cd:4b:4e:cb:93:2d:09:f8:f7:c9:
         14:bf:42:d8:cd:d4:bd:c3:b5:ae:6e:ee:06:ef:01:f0:fd:36:
         21:77:dd:fd:53:e6:75:64:85:91:76:93:37:86:8a:a2:5c:6c:
         f2:cf:7c:ef:4f:b4:4f:e2:ed:4d:7d:4c:e6:91:0d:62:7c:6d:
         54:c3:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:12 2025 by rpki-client