Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3a56f838-36ce-37ba-bea3-ceb88122efbc.roa
File:                     3a56f838-36ce-37ba-bea3-ceb88122efbc.roa (raw, json)
Hash identifier:          0yRbOCNLjXrd6CHEbX/20fcVLuKWS8zlEdtE/YHXGNU=
Subject key identifier:   50:4E:EC:47:70:8E:B3:9D:EB:9A:AA:1A:33:31:4E:83:D1:4E:14:F5
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F432858488DAB536AE6E7C76D5458EB00
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3a56f838-36ce-37ba-bea3-ceb88122efbc.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     26383
IP address blocks:        2605:e440:29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:53:6a:e6:e7:c7:6d:54:58:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=944e7450-4e57-4ff5-8e88-37bbff06b3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:49:7b:0d:7e:d4:52:2b:41:f0:56:3b:c4:
                    ae:86:33:dd:c9:e0:fc:9e:3c:bb:7a:aa:eb:4a:28:
                    3d:5f:fa:ea:97:17:8c:40:c2:f0:13:4d:14:7e:1a:
                    98:02:5b:8d:f8:6b:52:97:1d:9f:a3:06:28:27:d1:
                    61:51:c5:88:cd:a7:63:66:86:a0:1c:9d:9e:73:57:
                    0b:31:a7:b1:5e:b4:3c:90:10:f8:fa:82:5f:33:c1:
                    e8:6f:e5:8b:83:95:6f:91:5d:b8:cb:ee:0f:9b:a7:
                    4b:67:ac:80:0c:ae:f4:52:3d:03:6e:06:a4:b6:0d:
                    07:5d:d7:91:cb:c2:ee:4d:65:5e:b8:3d:5e:16:ff:
                    2f:2a:88:00:ce:54:07:24:e7:b7:72:b0:36:82:ff:
                    c9:e2:86:33:16:99:3a:a5:45:dc:d8:cd:f8:ac:85:
                    b7:65:bc:00:a3:63:64:83:ae:43:94:5a:24:d2:07:
                    65:df:b1:e8:62:0a:51:1f:d2:9d:6c:c5:39:06:ab:
                    bb:78:2a:aa:0a:cd:78:76:0f:3f:f0:0b:01:a7:ee:
                    ce:93:83:73:2e:65:ac:5c:87:45:0a:b1:1e:86:9a:
                    9b:9e:1d:c1:f8:45:0f:b4:e5:ee:ac:51:ee:e4:a6:
                    1a:af:10:34:a0:c6:2b:6a:b0:aa:63:4d:6a:ee:55:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:EC:47:70:8E:B3:9D:EB:9A:AA:1A:33:31:4E:83:D1:4E:14:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3a56f838-36ce-37ba-bea3-ceb88122efbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:be:5e:56:d4:0b:0a:ab:42:9f:a4:b6:5d:e2:b3:20:59:97:
         0a:7d:82:c1:e9:48:82:4b:bf:6f:98:55:e1:bb:d7:f7:08:dd:
         af:75:0f:01:8b:0e:a2:3e:a5:96:8e:66:d4:60:96:ba:b2:9d:
         4d:72:d4:95:2e:ca:08:44:95:8c:87:73:26:a1:89:ba:91:eb:
         68:78:d0:b1:87:15:84:72:8a:ec:18:86:52:85:64:6a:36:0e:
         e8:3e:42:de:5d:da:5c:87:ab:a9:df:ad:8f:d2:b4:8b:68:5f:
         44:57:62:1f:f8:64:47:00:7f:7f:96:26:08:9e:56:43:6b:f9:
         17:de:cb:5a:04:55:fa:65:da:01:cf:de:95:ac:a6:bf:10:39:
         e2:27:a0:b5:50:02:3f:3b:94:19:98:7f:68:4d:83:5b:20:aa:
         4f:c8:1b:f2:36:66:50:8b:ca:b6:b2:55:93:17:e6:f1:2c:2c:
         60:5c:f0:75:57:02:c8:9e:de:d6:c0:2c:ba:13:0f:7d:9c:1f:
         e5:d5:4f:42:18:6e:7f:23:62:87:6f:29:b9:d2:c8:83:3f:3d:
         f9:05:4f:19:61:44:10:5e:f3:01:e2:99:a4:88:4e:84:26:63:
         52:47:22:5c:af:0c:92:2d:1a:3d:b9:cd:83:a5:55:b1:d4:20:
         0f:b7:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:54 2025 by rpki-client