Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
File:                     ab70b155-c31f-3dfa-b48d-947689c8f9df.roa (raw, json)
Hash identifier:          Pd7SgpFoosnsDkinTi28eIQ5lDZhVv0SqX0K4mGblqI=
Subject key identifier:   91:04:C9:33:69:06:BA:4C:80:E2:E1:A3:BF:70:A7:03:C4:7F:8B:FF
Certificate issuer:       /CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
Certificate serial:       010D0C9F432858489340B0DFA011350995A887A0
Authority key identifier: 73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     29770
IP address blocks:        2602:faae::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b0:df:a0:11:35:09:95:a8:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48dc9aa-413f-45f8-9a4e-20346bdcca64
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=28082ca3-2a75-4d27-93a4-7d79fd85d3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:8e:6c:81:a7:a5:c3:fc:5c:ab:0d:ad:be:
                    a1:6e:75:d0:3b:93:55:c7:ae:44:7b:61:bd:28:a6:
                    78:c6:01:25:d3:86:29:2b:ce:f9:7a:e5:f4:77:73:
                    d5:bc:52:d8:89:d4:fc:71:65:9d:32:f6:ec:31:01:
                    9b:25:8c:42:a8:28:ec:7d:e0:08:46:e6:85:55:08:
                    b6:14:d4:ce:0e:6a:56:36:35:08:98:52:32:85:e5:
                    cb:f1:f3:51:4e:40:f4:85:0e:11:0a:fe:18:3d:50:
                    12:2a:d7:3d:cb:96:80:66:7b:69:09:c3:04:38:09:
                    28:ad:b9:7c:ab:ec:9e:dd:41:3a:d7:2b:3f:28:5d:
                    23:f8:94:cb:95:96:54:ac:ba:11:b0:13:7a:d1:c9:
                    2d:cd:8a:62:57:6c:70:af:ee:00:46:64:74:93:71:
                    36:c8:bc:b3:8e:be:e3:88:6a:31:e5:57:5c:ae:57:
                    c5:fd:cf:db:46:2b:80:7f:47:49:31:e6:8f:23:61:
                    6e:0a:3d:c7:94:1a:81:e8:d5:7a:c0:00:ae:0c:8e:
                    78:9b:37:41:9b:58:96:f4:da:30:23:6f:18:c6:81:
                    45:34:19:eb:3f:08:3f:b0:33:61:5e:5e:9a:5d:d3:
                    39:39:70:5a:6b:50:0c:e4:a8:0b:a4:cd:4b:fc:72:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:04:C9:33:69:06:BA:4C:80:E2:E1:A3:BF:70:A7:03:C4:7F:8B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/ab70b155-c31f-3dfa-b48d-947689c8f9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64/e48dc9aa-413f-45f8-9a4e-20346bdcca64.crl

            X509v3 Authority Key Identifier:
                keyid:73:F2:EF:9F:7B:AB:1D:FA:60:EB:45:BD:F6:94:39:DA:68:7C:31:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e48dc9aa-413f-45f8-9a4e-20346bdcca64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bf:96:de:82:bf:46:d8:67:a6:bb:6a:19:01:e8:61:9f:d7:
         c3:f5:98:70:59:ad:36:ad:bf:02:fd:78:00:da:6e:84:eb:3c:
         38:2c:40:36:79:c2:6a:6a:a8:50:19:d9:76:aa:9c:7b:99:2a:
         8d:89:c6:a4:c7:09:9a:86:7d:dd:e1:d6:f6:f2:b2:19:b7:fb:
         66:f7:ed:84:c3:c7:ef:97:1c:06:86:4a:a5:9f:14:45:db:bf:
         70:7e:f4:b5:45:af:66:d8:97:f4:7e:ea:f2:16:d6:c1:6e:2c:
         21:b1:e0:b3:33:5d:89:6d:8a:9e:27:3f:ef:06:a8:3f:c5:0b:
         fb:18:28:f3:75:ad:04:3d:fb:c1:54:3a:28:4a:0c:c7:00:35:
         48:91:33:9b:8a:4a:b9:6a:7d:ca:9b:8e:10:72:97:56:80:18:
         da:d0:54:75:4c:b7:8f:c5:b3:60:87:8f:a1:76:5c:d1:04:63:
         2e:c7:aa:09:72:cb:e3:0d:dc:a0:23:c7:26:8c:a5:b5:f9:fa:
         2a:72:98:47:78:a6:bd:0c:39:83:56:a8:1e:6d:a4:c4:99:06:
         b7:a6:3c:2f:9f:bb:ab:d0:11:58:b6:27:b0:37:44:93:f8:5d:
         82:61:f7:a0:57:29:dd:43:3e:91:27:05:a7:52:55:bd:d7:60:
         11:78:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:02 2025 by rpki-client