Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa
File:                     1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa (raw, json)
Hash identifier:          ot0+DPJgMnebWNrcM1qBFAUvUJjf6E3rTeIdHi6nGSw=
Subject key identifier:   B8:5B:68:2C:B1:47:0B:7B:89:EC:8E:15:86:3A:A5:F4:BD:53:D9:DB
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F43285848FD56C5886733D5CEB812C970
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     399275
IP address blocks:        2602:fcc0:8888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c5:88:67:33:d5:ce:b8:12:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=ee0a286e-8d8c-4597-bd6e-a420f0d28551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:16:bd:55:21:0f:ed:95:c6:23:a2:d6:22:
                    1d:6e:53:f6:9a:f7:8a:7f:da:c2:16:7a:a4:e1:b5:
                    18:ed:5a:d8:ed:38:8a:e8:f8:a2:d2:58:6e:31:d5:
                    2c:1c:3e:ee:34:90:77:ba:e2:d9:7f:67:45:23:6e:
                    ae:7d:a4:11:23:aa:50:f3:c0:55:67:2a:d7:c1:61:
                    0c:2f:c4:bf:85:a6:1d:d0:5c:d5:8b:db:fa:27:a1:
                    91:7a:6a:fb:69:c1:28:2c:11:a8:66:24:8a:d3:5b:
                    fa:d5:34:ee:8d:91:17:4c:4d:b4:f2:94:c4:69:d7:
                    3f:d9:5f:d6:90:91:9e:4e:74:91:b7:a9:00:16:16:
                    9f:bf:f2:a8:f2:56:dc:69:45:0d:ca:a5:ed:94:a6:
                    50:4e:8e:5b:0e:97:ae:6e:18:f4:b5:d8:53:5d:33:
                    71:b8:3d:96:f5:0f:0c:50:a4:13:6f:ef:33:ed:fc:
                    8c:a6:ca:dd:fa:c4:16:d0:fa:2e:1f:d0:9c:c5:ff:
                    18:4e:e7:db:54:7a:11:46:30:63:72:df:48:8d:8d:
                    25:a9:01:51:fd:eb:3e:f0:a9:41:4a:95:b8:00:1e:
                    55:77:78:3b:1b:98:ef:05:67:7e:c4:c5:82:80:53:
                    8a:65:65:5a:23:6b:99:1f:48:a8:87:1a:06:a9:45:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5B:68:2C:B1:47:0B:7B:89:EC:8E:15:86:3A:A5:F4:BD:53:D9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1c51f95f-cdb6-36f2-ac22-87e17bd6475b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:8888::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:c2:8a:8c:6e:cb:cd:74:74:41:68:7b:09:29:9b:7b:de:
         2f:7c:89:76:23:ae:a1:51:44:df:e9:78:58:34:3c:ca:39:60:
         10:2e:04:b9:c9:21:27:eb:f5:1f:aa:d2:57:3b:a8:67:b8:6a:
         4b:00:22:81:8a:74:f7:e8:29:58:03:9c:71:a7:08:f8:28:d5:
         5d:d3:f8:81:88:1c:48:e1:48:0a:1b:36:c2:58:40:3d:2b:f1:
         17:73:de:4c:f5:d8:62:34:fd:ea:84:89:c0:67:f5:d6:fb:c4:
         ff:ae:a1:43:c7:ea:6d:64:6d:23:c6:bd:e6:d4:cb:48:b2:2f:
         2f:b4:e0:e6:93:5b:2d:2f:ab:63:8b:f6:ed:3d:dc:94:e5:03:
         c8:b9:a6:8c:f1:a6:d7:3f:90:74:27:8c:b1:13:75:e5:23:cb:
         2d:0a:81:47:d6:99:3f:f3:0b:6f:42:0c:82:3e:7a:71:28:87:
         fe:ec:72:9a:38:9c:86:74:3c:86:d1:23:80:a3:ca:35:28:b2:
         22:aa:4e:30:4c:31:97:b7:99:0d:d4:fb:d6:50:28:2e:19:a8:
         9d:64:54:37:cf:97:24:6c:46:f8:9a:92:48:ec:a9:f3:20:99:
         21:1a:25:f5:49:12:24:3c:29:9d:26:c0:c4:b9:a5:75:7e:6f:
         69:76:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:17:03 2025 by rpki-client