Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
File:                     833420d9-77fc-37d5-8ecd-825140380577.roa (raw, json)
Hash identifier:          /TD36rOnhyHq1K4zDuqJM9JaHN0P8G2MYH9K3ntDDDQ=
Subject key identifier:   B0:A9:D2:09:D7:C7:F8:B6:2E:F5:23:19:78:79:87:17:8F:DB:C0:A6
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F432858495D89657E822CE1CE0FC112B8
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     26548
IP address blocks:        2604:7a80:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:65:7e:82:2c:e1:ce:0f:c1:12:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=557c3bf6-73b6-43a9-bf58-3c1dcf3c7fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ad:e4:08:96:68:4e:32:82:a0:dd:0b:d1:5d:
                    04:5e:47:85:f8:85:8c:6a:fc:2a:1a:20:6f:5b:55:
                    0d:8c:74:30:34:f2:e4:1a:51:d5:c6:24:38:d2:22:
                    ce:c0:34:50:ee:81:fc:a5:75:80:8b:53:04:01:87:
                    52:ae:d5:77:8d:7c:bc:d4:09:b9:7d:82:6d:ae:70:
                    54:63:36:8f:6b:93:3b:0e:9c:c2:2b:83:f7:00:35:
                    9f:96:4d:32:94:7a:c6:bc:b5:0a:6d:1b:fa:04:49:
                    fe:4b:ee:48:f5:c5:c9:74:ee:b5:ef:f3:9b:30:1d:
                    88:1c:c9:6c:0b:c6:be:d7:d5:db:32:21:55:65:ec:
                    2e:95:b9:8a:51:fe:43:3f:6c:96:24:bf:33:08:13:
                    ac:81:48:d5:38:35:18:8b:da:c9:88:2b:76:42:a9:
                    6e:19:fd:9b:17:d8:41:d5:0b:76:0c:c8:81:00:5a:
                    f0:b7:3f:ce:fd:47:e2:ba:31:63:9c:2d:0d:ca:2d:
                    ee:38:40:28:d0:49:84:75:e9:04:57:59:10:5e:5a:
                    89:48:ad:66:52:76:e9:36:2d:9c:38:ce:ae:9b:54:
                    98:d0:37:2d:b6:82:ac:1d:bd:df:4a:4f:96:17:5a:
                    ab:3f:97:5f:c2:f2:de:19:9f:83:a7:95:4a:27:4d:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:D2:09:D7:C7:F8:B6:2E:F5:23:19:78:79:87:17:8F:DB:C0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:c0:bd:51:01:2e:78:40:f9:96:62:2d:d2:4f:00:15:97:
         57:1f:6b:97:c0:30:3a:b8:e5:2e:a3:fe:50:59:e4:67:23:19:
         39:8c:ca:25:d1:e5:35:a2:25:a4:5c:c0:0a:3b:b8:dd:80:b2:
         d1:02:0e:d9:21:2b:e3:bb:c6:dc:1a:38:2e:18:d7:16:b6:97:
         c7:85:93:cf:ee:65:98:a3:5e:e2:03:79:1a:bb:28:e4:51:15:
         c7:74:dd:61:d7:e7:f3:cb:3a:54:0b:d6:a2:f7:ad:4b:47:ac:
         e6:79:11:83:6a:3e:e9:4b:06:ff:e7:bf:a9:e8:a2:41:83:46:
         82:da:f5:66:bf:80:6d:7c:a3:33:97:d1:55:07:c7:03:fe:26:
         11:8e:04:d1:01:80:06:39:2e:46:d0:8e:62:5c:ad:19:76:7b:
         da:3a:68:4f:09:e5:f3:e9:56:d9:f0:8c:0e:23:90:9d:4c:9d:
         de:21:52:c5:ef:96:f5:57:37:25:32:f0:ec:65:c5:e7:70:a3:
         48:89:be:e5:73:e9:f4:e8:dc:ac:cd:46:5a:b0:3a:7e:e2:09:
         94:b6:72:9b:13:93:7d:5a:2c:43:0a:db:91:d5:c0:14:d7:45:
         a0:02:19:16:5c:6a:73:d1:cb:2f:17:c5:8e:8c:0f:aa:de:d4:
         41:99:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:00:23 2025 by rpki-client