Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
File:                     4e00c024-f493-3f70-9db1-bef788678325.roa (raw, json)
Hash identifier:          ssFdv+KzAsGn+9o0WA4dkqCWQIa7DlmL1lpdz87x914=
Subject key identifier:   4D:F6:49:57:A5:06:2A:28:84:15:B6:E6:00:C1:34:86:84:71:06:38
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F432858495C244268555FBE6612EFAC40
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     210645
IP address blocks:        2602:2c9::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:42:68:55:5f:be:66:12:ef:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d7ab36a6-88f6-4ad2-a6b4-0b5873773c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:2c:c4:44:fc:36:cb:ad:b8:4a:42:a9:86:
                    c4:7b:bb:fa:0f:19:22:66:5a:09:10:8a:a6:06:28:
                    7b:41:41:3a:48:0e:3a:21:76:34:99:7d:18:b9:82:
                    83:59:4d:cb:f7:7d:b3:5e:90:7c:35:d4:56:89:f7:
                    ad:e1:33:43:58:49:eb:6c:9d:dc:42:78:14:7a:83:
                    f5:92:f7:64:a3:4b:e3:e7:89:ee:4d:27:e6:26:1e:
                    b1:de:ca:a2:9b:7e:33:84:45:fd:12:16:eb:28:37:
                    01:c0:4e:0d:79:d7:57:41:9b:44:88:4a:01:92:cd:
                    2c:70:a4:a7:89:b3:1f:f9:b7:40:02:bf:e7:ae:aa:
                    2e:8d:31:10:12:e0:cf:9f:38:62:fa:5f:6e:76:cf:
                    8c:2b:60:17:77:be:64:57:34:8b:3d:8d:75:1c:c5:
                    fc:60:b0:73:c0:c7:38:c6:fb:8b:ac:2c:b3:14:5c:
                    09:01:e0:f9:8e:d8:48:bd:8e:9a:f0:b3:32:e0:a9:
                    a8:2a:ec:fe:90:bd:c4:d5:b2:ea:05:2b:0a:a0:94:
                    ac:69:8f:e2:b5:99:24:aa:df:bd:59:85:5a:f4:7e:
                    83:46:c2:83:ee:21:32:a7:0f:37:cf:c9:cd:a7:15:
                    19:fe:63:bc:ed:31:65:4d:ac:04:4c:8f:ec:53:20:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F6:49:57:A5:06:2A:28:84:15:B6:E6:00:C1:34:86:84:71:06:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/4e00c024-f493-3f70-9db1-bef788678325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:07:18:77:aa:3c:70:08:e9:ac:31:c5:7f:b1:0e:83:f2:
         b3:b9:1f:6a:b9:65:40:44:dc:6c:ac:9c:3a:63:a1:2d:60:ed:
         b9:15:a1:73:40:25:52:82:17:05:8e:d6:02:85:a5:33:83:3c:
         aa:c6:3b:04:b9:c0:dc:ec:2f:3e:9e:85:fb:7b:0c:19:ea:92:
         d8:f4:42:fe:4f:a0:73:c2:46:8e:22:33:18:1c:2b:4f:39:12:
         32:14:e1:53:f6:7f:9b:3b:eb:80:58:71:31:81:e1:5c:a4:fa:
         7f:1b:e1:91:16:73:69:3a:e0:3f:58:0b:ab:f8:93:6a:e2:1e:
         09:08:a3:2a:3e:9b:0f:20:7e:a9:ab:31:61:9a:6f:11:c6:ec:
         c7:e4:19:f8:4a:88:f8:46:71:ce:f1:1c:97:c5:59:60:5a:2d:
         d1:8a:c6:9e:f6:9b:cc:09:a0:4c:38:a2:0d:d6:a4:f5:19:37:
         35:5a:2e:56:0f:35:2a:46:d7:61:d4:2c:de:36:6c:89:bf:a8:
         a4:f9:b6:e8:4f:21:c3:ca:b1:75:9e:c1:20:bd:70:ee:0c:6d:
         e3:55:79:58:f0:31:aa:e9:91:fd:c6:31:0d:e7:be:03:60:37:
         16:e3:a5:ef:53:99:df:11:76:e0:04:47:67:05:14:51:df:ac:
         b0:d3:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:55:22 2025 by rpki-client